last executing test programs:

12.244596012s ago: executing program 1 (id=6028):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="2800330020100800080211000000ffffffffffff5050505050501aff200002000802110000000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x1000)

10.218648645s ago: executing program 1 (id=6031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0500000004000000040000000900000010000000", @ANYRES32=0x1, @ANYBLOB="f7ff000000000000000000000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0)

10.004856491s ago: executing program 1 (id=6037):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f5090", 0x52, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{}], 0xfdfe, 0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010100}, 0x10)
recvfrom$inet(r1, 0x0, 0x0, 0x10002, 0x0, 0xffffffffffffff68)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'vlan0\x00', {}, 0x3})

9.664848992s ago: executing program 1 (id=6042):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) (async)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)

8.013604304s ago: executing program 1 (id=6045):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

2.670088559s ago: executing program 3 (id=6127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0)

2.510569244s ago: executing program 3 (id=6130):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000103040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c00028005000100000000001400018008000100e000000208000200e0000002"], 0x50}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x800, 0x5)
sendmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

2.314397763s ago: executing program 2 (id=6134):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
sendto(r2, 0x0, 0x0, 0x40000, &(0x7f0000000000)=@generic={0x1e, "ce33be0d44c60b14d87167d49396208e01367b3d90e5a933e1b2aee80d2c71d4e268223ed7dac20eccf4a0847aae138d9155f11f9f8fa070942cefc3a2910c9acb202d7f68a62b9aa78bb1327d24a0c44f4b9640cdcb14560949aa7a1fc3a33c332a4c409d1ddb96443400bd5f7f533e1de8c9663df1912afbe896cdad4f"}, 0x80)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0)
close(r1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd00}, 0x48)

2.062427123s ago: executing program 3 (id=6137):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4040)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010000000074900a3100000000000e0003006269746d61703a697000000005000400000000000900020073797a32000000001800078005100300e40000000c0001800800014080ffffaf05000500020000000500010006000000"], 0x60}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010000000074900a3100000000000e0003006269746d61703a697000000005000400000000000900020073797a32000000001800078005100300e40000000c0001800800014080ffffaf05000500020000000500010006000000"], 0x60}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8ad3}, @TCA_PIE_BETA={0x8, 0x5, 0x19}]}}]}, 0x48}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
accept(r3, &(0x7f0000000180)=@hci, &(0x7f0000000240)=0x80) (async)
r6 = accept(r3, &(0x7f0000000180)=@hci, &(0x7f0000000240)=0x80)
sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@ipv4_newroute={0x108, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x10, 0x40, 0x0, 0x4, 0xc8, 0x3, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x28, 0x5, r2}}, @RTA_ENCAP_TYPE={0x6}, @RTA_UID={0x8}, @RTA_METRICS={0xaf, 0x8, 0x0, 0x1, "2d5592dbdad34727831d038fe32268671ee31968021be4411128bff7f5f9b52f0edf056896d58d627925a28467182c8ae517ad235393bda8aa70be744233a0568576e89742f02da75b8579930fbd30df3163f8c7b66325a6ceb1b26aa6153ec498c4558721a252e8830c2d4a6f69d334032d10564ee8fc7e691fdd7780c55a46d287b2f82ce33df5c943ce3ea868c868f42a4bf6d400b0d973d73a2d39b890e8f5ac936c4df89b38f689a5"}, @RTA_PRIORITY={0x8}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

2.061879625s ago: executing program 2 (id=6138):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x190, r4, 0x1, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x1, 0x25, 0x9}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x4, 0x0, {0x9, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x1, 0xfd, 0x25, 0x81ff}}}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0xfe, 0x91, "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"}]]}, 0x190}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x3, &(0x7f0000000080), 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040)

1.878674718s ago: executing program 3 (id=6140):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x14, 0x37, 0x0, 0x1, [@typed={0x10, 0x3, 0x0, 0x0, @str='qtr(4\xa9\x19sm4)\x00'}]}]}, 0x28}}, 0xc000)
bind$inet6(r0, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x304}, "aa590aadf5b0dc20", "ca61ade9fcc10abb8acb40e489f5701d", "47e55ab0", "6e64eed305347483"}, 0x7)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MTU={0x8, 0x4, 0x7e}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}]}]}, 0x58}}, 0x0)

1.806534236s ago: executing program 4 (id=6141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="85200000d95e16fcb2ffffff", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000300500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018640000080000000000000008000000cf20fcff0100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000003a000000"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x88, &(0x7f0000000200)=""/136, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x1, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0x3, 0x9}, {0x1, 0x4, 0x2, 0x8}, {0x3, 0x3, 0xc, 0xc}, {0x0, 0x2, 0xa, 0x3}, {0x2, 0x1, 0x5, 0x3}, {0x4, 0x4, 0xb, 0x3}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r4, 0x4)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0xffff, 0x4}, {0xd, 0xa}}}, 0x24}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

1.745618058s ago: executing program 3 (id=6142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
accept4(r0, 0x0, 0x0, 0x80800) (async)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000102010800000000000000000aec1d08"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1.731911536s ago: executing program 2 (id=6143):
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x2}, &(0x7f00000000c0)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="100001800c000480"], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x4d)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140))
r6 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.650452875s ago: executing program 4 (id=6145):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x3c, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket(0x10, 0x803, 0x2) (rerun: 64)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x34008085}, 0x4000000) (async, rerun: 64)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765", @ANYRESDEC=r4], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

1.581125364s ago: executing program 2 (id=6146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x28010000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x8, 0x4, 0xff, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000001080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b708e20000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058af14e92fc4e77a2ca4d36f63"], 0x0, 0xfffff027}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x4, <r7=>0x0}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3, <r8=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r4}, 0x20)
r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r9, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4, <r12=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x9, 0x1b, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0xff}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r1, 0x1, &(0x7f0000000980)=[r3, r3, 0xffffffffffffffff, r3, r3, r8, r12, r3, r3], &(0x7f00000009c0)=[{0x0, 0x2, 0x9, 0x7}], 0x10, 0x1}, 0x94)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r13, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r14=>0x0})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000b00)={0x3f0, 0x12, 0x4, 0x70bd2b, 0x25dfdbfc, {0x21, 0x81, 0x6, 0xf0, {0x4e24, 0x4e20, [0x0, 0x5, 0x4, 0x1], [0x8, 0xef, 0x1, 0x2], r14, [0x3, 0x4]}, 0xc7, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "28ed2c55919b3b2d7b63f2c66c555785af9598ce140889ebfc"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x53, 0x1, "a3fec1e292db7f89d6d73fd0232c5bd69e509cf19eb4cf7636d27ce0df731bd34b6384423f744a81364ab3e4741a7e6f403628ce7a26ff892d3d7633bf436eda9f194246b9b39a23ff2c69f42af99b"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "c1bd8d74fe9d9b127466f99d0050b8cdeba4d012177b93f81a1b9adcd6dc800e29fcdccd7e0ec72cdbbcaa6cb377cc3dbf8c6fa4ddabd8d4ed5e02c22cb54f726005bcd436a4ea51c7d95b0aa090"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "f2da1a38b68bc6d61ff41213263000b02cfe3bbf0262264a89c22da150a4f4ca069b210072c803d0c77ddbdf8a0d0f0f78f5315ae84cacc96dc36e3bfc5ef5e7e5dcdee0a5cf500ffa595287df37e561add76c7f6d3d602c36d57313153a1c7e08df97226a375e569379d24597f2a7f7c5f9af589fac5a499e406e41cde0081a383f01023881b86873c50680cb054d7117aeb3f08d240384a167590df6fcd637369c3bce864f714562896573499acca8dfe3294fd9a6b581a40b971bcd4b9465b4cec1c86d4b054939f2ef6d9d62daa28e"}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4040}, 0x40080)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={<r15=>0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4}}}, &(0x7f00000001c0)=0x84)
r16 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r16, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4)
setsockopt$packet_fanout_data(r16, 0x107, 0x16, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r4, r3}, 0xc)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001100)=ANY=[@ANYRES32=r15, @ANYBLOB="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"], 0xe)

1.418588571s ago: executing program 3 (id=6148):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r1, 0x0, 0x9}, 0x18)

1.417541717s ago: executing program 1 (id=6045):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

1.394867804s ago: executing program 4 (id=6149):
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

1.268167402s ago: executing program 4 (id=6152):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0xfffffdb6, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000202aaaaaaaaaaaa05003700010000000a0001007770616e31000000080002"], 0x4c}, 0x4, 0x700000000000000}, 0x88c0)
listen(0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], 0x48)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20)
recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x14f)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r5)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)="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", 0x157}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvlan0\x00', <r6=>0x0})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x4}}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x0, 0x2e, 0x30, 0x5f, 0x2e]}}, &(0x7f00000005c0)=""/106, 0x47, 0x6a, 0x0, 0x6}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000680)=""/239, 0xef, <r8=>0x0, &(0x7f0000000900)=""/12, 0xc}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x7, &(0x7f0000000200)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x1, 0x3, 0x3, 0x9, 0xa, 0xfffffffffffffffc, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000240)='syzkaller\x00', 0x3b400, 0x3d, &(0x7f0000000280)=""/61, 0x0, 0x54, '\x00', r6, @fallback=0x2b, r7, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3, r4, r4], &(0x7f0000000a00)=[{0x5, 0x5, 0x9, 0x3}], 0x10, 0x2}, 0x94)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x453, 0x2, 0x70bd28, 0x25dfdbff, "c8e807df19d5c22817", [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4)

1.086586097s ago: executing program 0 (id=6154):
unshare(0xc040480)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) (async)
sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000)
unshare(0xc040480)

946.530954ms ago: executing program 0 (id=6155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd25, 0x25dbdbfa, {0x4}}, 0x14}}, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82b"], 0x7)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60)

744.348131ms ago: executing program 0 (id=6156):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff", 0xd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000040)={0x0}, 0x10)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x58, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000680), 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}], 0x4c)
sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x91ac, 0xfffffffd, 0x7, 'syz1\x00', 'syz1\x00', {0xc9c6}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfff9, 0xc0d, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff", 0xd) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000040)={0x0}, 0x10) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x58, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000680), 0x4) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}], 0x4c) (async)
sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x91ac, 0xfffffffd, 0x7, 'syz1\x00', 'syz1\x00', {0xc9c6}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfff9, 0xc0d, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async)

563.749269ms ago: executing program 0 (id=6157):
r0 = socket(0x1e, 0x1, 0x0)
accept$inet6(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0400", @ANYRES32=r3, @ANYBLOB="01"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

374.384246ms ago: executing program 4 (id=6158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x38, r1, 0x208, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wg1\x00'}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x73e5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x2, 0x10000, 0x1, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r14, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000cc0)={0x538, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3a9, 0x2f}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x40}]}, @NL80211_ATTR_NAN_FUNC={0x504, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x348, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "8d592e632ef05b22d23e845ae67309e17fb3e26f36c6108e8f8bd1d3ae760c6b8fbe50ef3b58a67a054f30a92b2ef6369b4b2bf3c4fda6e36b06828eef803e46d0a3a02a3dc24f6b979eff4fcf5d0e079ce5cecd611d8d95eca8204a5a503e31e6fac3ec7f82f3beea2b583ac5cd3c46f87589a1285e9c8b87e399c0e63f8818e0cde6eea2a9a158d8492c8ffc419740e9d73c67949d2625683760579c84d4038a98268ea0b494e3291ca6c63849ebeae7d29fff5673bd8cae10344185ad4c0432bea9f133ec83befe8d76b9e77be4438c8c20690f27e72860e59e09ea794852f50dd4be259358f6d62b9685e1555b36efa7ce446ee1b789339afdb9fa742d"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x14}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x140, 0xe, 0x0, 0x1, [{0xa9, 0x0, "d6c54cffc2eceee1c041e62d3029145bb99e419402d5b5a9b8e5252608ecd27fa0e7797dbe469ac39a250cbf716210c1497d8b2224b5f3875c156b7d22fe31b64bf2772d3c399ae948c869a190b90220963ba2bb3cf90e24c2ea7ec473da76741ea1438d8ef72347527da41e555d04d5ba103732c2618763c186d89a128cb9ebb81e3fb008d00265bede6f184ab29556056a4d75dfee7f827c1b656a117c0e85960ab5cc14"}, {0x28, 0x0, "8329f09133c563d81cb5ed93da2c4346b316200fe4de6d8df7733034b1da88b3b0e474c5"}, {0x67, 0x0, "e67704591fac7f8e93061c2beb906edb909b4e7558ca94af97a7986d61597d8e4023ba697d1467889e3732fefc8936b63009ea882caf9e6a1fc01a560850a227d1bca7e57b0ba22ec9acb30628fb24ad7fadb977de11f15a0f92ffd564d49cd410e6ab"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "25776de644f7"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x62, 0xb, "a2b2142582b888bbccc46cbcf63e760c1f77530fd193493542493eceed1874fa0e26a267e39eea71f9fda6d642fee2642600a4fff8d2869d590086b391e3e6a1af7288b8193ccc45f47823b0182fae4931ac584284ec4034c919d8bd41e9"}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x40}, 0x44001)

246.000649ms ago: executing program 2 (id=6159):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8)
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4f25, 0x1, @remote, 0x5}, 0x1c) (async)
sendmmsg$inet6(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="66b84ecae707af39d0d5dbb10589d54e8da5a8851e515101f6548e9035c65f5adcbe4cd0d9f2c1edccb3e81af68688ef2f5fcf9c36a9c6d100399ac0559ee41daf8a0408c40d80ead6ff1ad81f266c6c5a175d1dfb11a216b550e9046b6ef5edc967599c07dcbfbdaa9911ecafec5b6180345479bf2905cc0f74d5b6e6ae2c961552e9f3ae10b24e4250d7593c2cc562f5ed", 0x92}], 0x1, &(0x7f0000001c00)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x5c}}}], 0x18}}], 0x1, 0x4001c41) (async)
sendto$inet6(r0, &(0x7f0000000380)="01e1c518769c29daaeb50f7248e52e3c34be188f92c11e8ad40da416c72276d28c102d95c110b4c454c53e5553c98f3d2b106e6dbf29ed02ca59400b6e1ca860633cb4c5fd3183d8e48eeed41da648f3a6210a58984f823abc1837bc0b35976def9d88749b01604790e2090d7aa76ebdb297f0c64e3102c47fb2c559488618f2afd54e60bd6e7e66b690537401191bc1c6136c978e243b3b1d9ac9e76687ad627629a81a3d080a1046c2b847", 0xac, 0xc000, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

189.212775ms ago: executing program 0 (id=6160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x8084)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000070a010100000000000000000200000814c32a376a3171b7f63ce2d51caa21103850c050c6adce48ba0f325dbb4405fade09f9a0c22c94c4a0353854837eaa8931c82259fb70779d425a1139ef1025d793963ef47e0b78b6090000002bf74569cf0bec9f7e4688a47f19932d92ebff47df0ba0372eb79b8f240a86c62c66d37a691b2d40f56e9f5aab307fc1cacd20702b8bc5e01e2bc03433143cf8d5f6e0c39d1e82f5288ce3c5e35276e32c91b06c5c2bfc4fa5a9876ce8aaf6e72ffe145a27d658f43b3a07d3da9ed4a9b2c944a06ba29239f20cd8dc76d21128352d21ff9d20626612d6d722e7056dd8b03d24aa6f00"/262], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)

2.501178ms ago: executing program 0 (id=6161):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0xc6, @mcast1, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c)

1.62613ms ago: executing program 2 (id=6162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000005c00), r3) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005c00), r3)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x58, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xaf}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xfd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x84c) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x58, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xaf}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xfd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x84c)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x400, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xf01}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)

0s ago: executing program 4 (id=6163):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001900ab011e284dd1a836537cb9bc37bb891db7062863bc0761e08aa42d34a63abe211aaf68791b181eeed829f5890fcf0100000000000000000004000000000000003b6f2811032d680500000044f47c285eb2ff3720c904f9bfaf5eeba9024650c4934e45a3e6db060000004909497df00d71d2273b284c3cac17e3bb77"], 0x64}}, 0x0) (async)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x620, 0x16}, 0x14)

kernel console output (not intermixed with test programs):

ver after parsing attributes in process `syz.3.3595'.
[  394.430477][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.577506][T18515] vlan2: left promiscuous mode
[  394.602353][T18515] bond2: left promiscuous mode
[  394.607189][T18515] bond3: left promiscuous mode
[  394.632606][ T3584] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.668377][ T3584] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.721760][ T3584] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.943999][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3600'.
[  395.139117][T18556] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  395.399226][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'.
[  395.425218][T18572] netlink: 'syz.3.3612': attribute type 10 has an invalid length.
[  395.442043][T18572] veth1_macvtap: left promiscuous mode
[  395.575424][T18584] netlink: 'syz.4.3616': attribute type 2 has an invalid length.
[  395.854367][T18603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'.
[  395.864483][T18603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'.
[  396.092793][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'.
[  396.544660][T18636] syzkaller0: entered promiscuous mode
[  396.560245][T18636] syzkaller0: entered allmulticast mode
[  396.580985][T18647] syzkaller1: entered promiscuous mode
[  396.587000][T18647] syzkaller1: entered allmulticast mode
[  396.632463][T18662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3635'.
[  398.398952][T18700] sctp: [Deprecated]: syz.4.3642 (pid 18700) Use of int in maxseg socket option.
[  398.398952][T18700] Use struct sctp_assoc_value instead
[  398.576452][T18708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3643'.
[  398.758724][T18722] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  398.988518][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3644'.
[  399.348061][T18759] team0: Device vti0 is of different type
[  399.393939][T18767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3662'.
[  399.578045][T18777] syzkaller0: entered promiscuous mode
[  399.585744][T18781] netlink: 'syz.4.3664': attribute type 1 has an invalid length.
[  399.595367][T18777] syzkaller0: entered allmulticast mode
[  399.733449][T18790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3669'.
[  399.900932][T18800] Bluetooth: MGMT ver 1.23
[  399.910795][T18799] dvmrp0: entered allmulticast mode
[  400.191537][T18792] dvmrp0: left allmulticast mode
[  400.303957][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'.
[  400.365859][T18818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.384946][   T30] audit: type=1800 audit(1759742299.885:8): pid=18816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3675" name="memory.events" dev="tmpfs" ino=490 res=0 errno=0
[  400.494834][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'.
[  400.530200][T18823] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.545152][T18818] tipc: Disabling bearer <eth:syzkaller0>
[  400.648776][T18822] bond4: Invalid ad_actor_system MAC address.
[  400.662199][T18822] bond4: option ad_actor_system: invalid value (1)
[  400.672963][T18822] bond4 (unregistering): Released all slaves
[  400.799944][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.829856][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.846794][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.883224][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.900219][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.902005][T18843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3683'.
[  400.925573][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.970558][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  400.984319][T18822] netlink: 'syz.1.3676': attribute type 1 has an invalid length.
[  401.016983][T18848] netlink: 'syz.2.3683': attribute type 58 has an invalid length.
[  401.025119][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3683'.
[  401.189018][T18850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.314632][T18854] tipc: Disabling bearer <eth:syzkaller0>
[  401.425649][T18857] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  401.456340][T18865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'.
[  401.458636][T18857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3686'.
[  401.474298][T17706] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  401.508838][T18862] 8021q: adding VLAN 0 to HW filter on device bond2
[  401.536270][T18857] syzkaller0: entered promiscuous mode
[  401.573219][T18857] syzkaller0: entered allmulticast mode
[  401.632499][T17706] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  401.699108][T18876] bond4: (slave bridge3): making interface the new active one
[  401.723345][T18876] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  402.054699][T18898] netlink: 'syz.4.3699': attribute type 11 has an invalid length.
[  402.085991][T18898] netlink: 'syz.4.3699': attribute type 11 has an invalid length.
[  403.121507][T18982] sit0: entered promiscuous mode
[  403.780747][T19023] __nla_validate_parse: 11 callbacks suppressed
[  403.780766][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'.
[  403.856638][T19034] lo speed is unknown, defaulting to 1000
[  404.056509][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'.
[  404.165541][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'.
[  404.165568][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.191928][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.213425][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  404.402377][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  404.416269][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'.
[  404.417448][T19034] wg1 speed is unknown, defaulting to 1000
[  404.705945][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3757'.
[  404.867441][T19076] bridge2: entered promiscuous mode
[  404.884840][T19076] bridge2: entered allmulticast mode
[  404.948676][T19079] lo speed is unknown, defaulting to 1000
[  404.970108][T19086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3760'.
[  404.979196][T19086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3760'.
[  404.994333][T19083] bond5 (unregistering): Released all slaves
[  405.046651][T19086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3760'.
[  405.227204][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3761'.
[  405.348984][T19079] wg1 speed is unknown, defaulting to 1000
[  405.971735][T19123] validate_nla: 33 callbacks suppressed
[  405.971754][T19123] netlink: 'syz.0.3771': attribute type 8 has an invalid length.
[  406.802077][T19173] netlink: 'syz.0.3783': attribute type 2 has an invalid length.
[  406.957028][T19187] syzkaller0: entered promiscuous mode
[  406.965557][T19187] syzkaller0: entered allmulticast mode
[  406.982965][T19187] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  407.589392][T19227] delete_channel: no stack
[  407.881536][T19249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  408.077566][T19254] tipc: Enabled bearer <ib:caif0>, priority 13
[  408.112553][T19260] netlink: 'syz.3.3814': attribute type 4 has an invalid length.
[  408.882957][T19310] __nla_validate_parse: 9 callbacks suppressed
[  408.882977][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3829'.
[  408.915891][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3829'.
[  408.955000][T19315] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  409.114417][T19323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.125184][T19323] batadv_slave_1: entered promiscuous mode
[  409.135367][T19323] batadv_slave_1: entered allmulticast mode
[  409.180898][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'.
[  409.201652][ T7826] tipc: Node number set to 1800573037
[  409.292229][T19329] bond5: option all_slaves_active: invalid value (222)
[  409.302674][T19329] bond5 (unregistering): Released all slaves
[  409.461517][T19327] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.469250][T19327] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.632554][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.655228][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.926925][   T49] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  409.952157][   T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.974773][   T49] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  410.028567][   T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.056750][   T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.080539][   T49] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  410.094036][   T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.103780][   T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.134006][   T49] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  410.165703][   T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  410.191322][   T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  410.204204][   T49] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  410.576694][T19397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3855'.
[  410.596789][T19397] syzkaller1: entered promiscuous mode
[  410.610249][T19397] syzkaller1: entered allmulticast mode
[  410.619380][T19407] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  411.011472][T19435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3865'.
[  411.063896][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3865'.
[  411.210577][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'.
[  411.214482][T19444] netlink: 'syz.0.3868': attribute type 1 has an invalid length.
[  411.336275][T19457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3873'.
[  411.348931][T19457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3873'.
[  411.359339][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3873'.
[  411.508763][T19463] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  411.617151][T19472] gtp0: entered promiscuous mode
[  411.640743][T19472] gtp0: entered allmulticast mode
[  411.968461][   T30] audit: type=1107 audit(1759742311.455:9): pid=19490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  412.024288][   T30] audit: type=1107 audit(1759742311.455:10): pid=19490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='��{���Ȋ4Qƍ��Ӣ�zF�[	'保"�u�	������1��<7��eE6��l���t�^&�/2�w��8���q-J]B����'
[  412.389273][T19519] chnl_net:caif_netlink_parms(): no params data found
[  412.390134][T19520] netlink: 'syz.3.3893': attribute type 2 has an invalid length.
[  412.554562][T19520] bond0: (slave bond_slave_1): Releasing backup interface
[  412.787889][T19546] : renamed from hsr0
[  412.878719][T19549] netlink: 'syz.3.3901': attribute type 4 has an invalid length.
[  412.911942][T19551] team0: No ports can be present during mode change
[  413.257445][T19569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.306828][T19574] netlink: 'syz.0.3909': attribute type 1 has an invalid length.
[  413.324702][T19573] netlink: 'syz.3.3908': attribute type 1 has an invalid length.
[  413.366877][T19578] tipc: Resetting bearer <eth:syzkaller0>
[  413.448190][T19582] netlink: 'syz.4.3911': attribute type 62 has an invalid length.
[  413.461096][T19568] tipc: Disabling bearer <eth:syzkaller0>
[  413.551411][T19586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.599136][T19586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.715775][T19601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.897672][T19624] __nla_validate_parse: 14 callbacks suppressed
[  413.897692][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3920'.
[  413.913037][T19608] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  413.937732][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'.
[  413.950681][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'.
[  413.962480][T19608] bond4 (unregistering): Released all slaves
[  414.007019][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'.
[  414.190578][T19641] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3925'.
[  414.254727][T19646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3930'.
[  414.265272][T19647] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.3930'.
[  414.339376][T19652] netlink: 'syz.0.3931': attribute type 5 has an invalid length.
[  414.384717][T19652] openvswitch: netlink: Duplicate key (type 32).
[  414.641748][T19672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.752129][T19680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3939'.
[  414.775274][T19680] netlink: 'syz.2.3939': attribute type 1 has an invalid length.
[  414.785542][T19680] netlink: 'syz.2.3939': attribute type 1 has an invalid length.
[  414.933162][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3942'.
[  415.045787][T19699] netlink: 'syz.4.3947': attribute type 6 has an invalid length.
[  415.077511][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'.
[  415.424303][T19724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.605496][T19732] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  415.624282][T19747] IPv6: sit3: Disabled Multicast RS
[  415.786715][T19762] l2tp_ppp: sess 2/0: no socket in recv
[  416.768550][T18645] tipc: Subscription rejected, illegal request
[  416.822097][T19837] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0
[  416.843293][T19839] validate_nla: 32 callbacks suppressed
[  416.843315][T19839] netlink: 'syz.3.3990': attribute type 10 has an invalid length.
[  416.858698][T19839] bridge_slave_1: left allmulticast mode
[  416.865069][T19839] bridge_slave_1: left promiscuous mode
[  416.871051][T19842] netlink: 'syz.0.3991': attribute type 10 has an invalid length.
[  416.880845][T19839] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.920536][T19839] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link
[  416.972146][T19842] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  417.258340][T19865] bridge3: entered promiscuous mode
[  417.289863][T19865] bridge3: entered allmulticast mode
[  417.432340][T19877] netlink: 'syz.2.4004': attribute type 11 has an invalid length.
[  417.491244][T19875] tipc: Started in network mode
[  417.519006][T19875] tipc: Node identity 1af6f6c13171, cluster identity 4711
[  417.536456][T19875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.560922][T19875] syzkaller0: entered promiscuous mode
[  417.566431][T19875] syzkaller0: entered allmulticast mode
[  417.586761][T18667] syzkaller0: tun_net_xmit 70
[  417.600987][T19886] netlink: 'syz.2.4007': attribute type 1 has an invalid length.
[  417.667669][T19874] tipc: Resetting bearer <eth:syzkaller0>
[  417.709174][T19892] openvswitch: netlink: Flow key attr not present in new flow.
[  417.741619][T19874] tipc: Disabling bearer <eth:syzkaller0>
[  417.930475][T19900] openvswitch: netlink: Key 26 has unexpected len 0 expected 16
[  418.001896][T19900] syzkaller1: entered promiscuous mode
[  418.007448][T19900] syzkaller1: entered allmulticast mode
[  418.261386][T19917] netlink: 'syz.0.4018': attribute type 11 has an invalid length.
[  418.723749][T19944] netlink: 'syz.3.4026': attribute type 2 has an invalid length.
[  418.866098][T19959] netlink: 'syz.3.4033': attribute type 10 has an invalid length.
[  419.237996][T19987] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0032
[  419.367106][T19999] netlink: 'syz.4.4046': attribute type 1 has an invalid length.
[  419.390288][T19999] __nla_validate_parse: 54 callbacks suppressed
[  419.390308][T19999] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4046'.
[  419.468125][T19999] netlink: 'syz.4.4046': attribute type 1 has an invalid length.
[  419.507532][T20002] netlink: 'syz.4.4046': attribute type 1 has an invalid length.
[  419.522685][T20002] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4046'.
[  419.540361][T20002] netlink: 'syz.4.4046': attribute type 1 has an invalid length.
[  419.727015][T20025] IPv6: NLM_F_REPLACE set, but no existing node found!
[  419.735920][T20025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4051'.
[  420.215192][T20061] netlink: 'syz.0.4059': attribute type 9 has an invalid length.
[  420.254753][T20058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.344524][T20058] syzkaller0: entered promiscuous mode
[  420.351180][T20058] syzkaller0: entered allmulticast mode
[  420.357604][T20058] tipc: Resetting bearer <eth:syzkaller0>
[  420.412650][T20055] tipc: Resetting bearer <eth:syzkaller0>
[  420.536602][T20083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4066'.
[  420.657038][T20090] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4065'.
[  422.197189][T20055] tipc: Disabling bearer <eth:syzkaller0>
[  422.318071][T20096] validate_nla: 1 callbacks suppressed
[  422.318154][T20096] netlink: 'syz.1.4068': attribute type 23 has an invalid length.
[  422.567162][T20091] bridge0: port 3(batadv3) entered blocking state
[  422.581941][T20091] bridge0: port 3(batadv3) entered disabled state
[  422.600137][T20091] batadv3: entered allmulticast mode
[  422.611875][T20091] batadv3: entered promiscuous mode
[  422.754838][T20105] netlink: 'syz.4.4074': attribute type 1 has an invalid length.
[  422.865511][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4075'.
[  423.055828][T20133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.064863][T18648] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  423.064919][T18648] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  423.128467][T20130] Bluetooth: MGMT ver 1.23
[  423.154999][T20130] syzkaller0: entered promiscuous mode
[  423.161347][T20130] syzkaller0: entered allmulticast mode
[  423.613938][T20164] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  423.874644][T20180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4093'.
[  423.897504][T20180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4093'.
[  423.992067][T20185] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4093'.
[  424.207285][T20164] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  424.262329][T20183] batadv0: entered promiscuous mode
[  424.271146][T20183] bond0: entered promiscuous mode
[  424.280870][T20183] debugfs: 'hsr0' already exists in 'hsr'
[  424.289372][T20183] Cannot create hsr debugfs directory
[  424.296109][T20183] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  424.307925][T20183] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  424.323983][T20183] hsr0: entered allmulticast mode
[  424.329241][T20183] batadv0: entered allmulticast mode
[  424.336049][T20183] bond0: entered allmulticast mode
[  424.342056][T20183] 8021q: adding VLAN 0 to HW filter on device hsr0
[  424.517892][T20201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4097'.
[  424.625887][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'.
[  424.647753][T20205] netlink: 'syz.3.4101': attribute type 3 has an invalid length.
[  424.736580][T20212] netlink: 'syz.4.4102': attribute type 32 has an invalid length.
[  424.778287][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4102'.
[  424.826005][T20212] bond5: Setting coupled_control to off (0)
[  424.833107][T20218] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  424.867479][T20218] bridge0: port 2(batadv2) entered blocking state
[  424.875274][T20218] bridge0: port 2(batadv2) entered disabled state
[  424.883541][T20218] batadv2: entered allmulticast mode
[  424.891209][T20218] batadv2: entered promiscuous mode
[  424.922642][T20221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4108'.
[  424.933236][T20217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.954384][T20223] syzkaller0: entered promiscuous mode
[  424.968926][T20223] syzkaller0: entered allmulticast mode
[  424.984656][T20221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'.
[  425.046141][T20217] tipc: Resetting bearer <eth:syzkaller0>
[  425.124741][T20216] tipc: Resetting bearer <eth:syzkaller0>
[  425.168321][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4111'.
[  425.206476][T20216] tipc: Disabling bearer <eth:syzkaller0>
[  425.214699][T20244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4113'.
[  425.238501][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'.
[  425.248012][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'.
[  425.322639][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'.
[  425.360658][T17706] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  425.370486][T17706] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  425.534958][T20258] team0: Device wireguard0 is of different type
[  425.650685][T20267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.687157][T20271] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  425.842524][T20282] netlink: 'syz.1.4126': attribute type 10 has an invalid length.
[  425.858292][T20284] netlink: 'syz.3.4125': attribute type 9 has an invalid length.
[  425.875675][T20284] netlink: 'syz.3.4125': attribute type 9 has an invalid length.
[  425.902387][T20288] tipc: Started in network mode
[  425.912630][T20288] tipc: Node identity e6f0107cbe64, cluster identity 4711
[  425.921132][T20288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.971816][T20288] tipc: Disabling bearer <eth:syzkaller0>
[  426.122762][T20303] netlink: 'syz.3.4133': attribute type 1 has an invalid length.
[  426.133595][T20303] netlink: 'syz.3.4133': attribute type 1 has an invalid length.
[  426.201250][T20303] 8021q: adding VLAN 0 to HW filter on device bond4
[  426.235978][T20310] bond4: (slave geneve3): making interface the new active one
[  426.268628][T20310] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  426.278047][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.309236][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.342339][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.357295][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.381020][T20316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  426.437539][T20316] sctp: [Deprecated]: syz.4.4137 (pid 20316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  426.437539][T20316] Use struct sctp_sack_info instead
[  426.461571][T20316] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  426.547714][T18667] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  426.559050][T20318] netlink: 'syz.1.4138': attribute type 6 has an invalid length.
[  426.656637][T20321] syzkaller0: entered promiscuous mode
[  426.663151][T20321] syzkaller0: entered allmulticast mode
[  426.672454][T18667] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  426.704955][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  426.783032][T20335] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  428.413950][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  428.424391][T20346] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  428.776219][   T30] audit: type=1800 audit(1759742328.275:11): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4153" name="memory.events" dev="tmpfs" ino=782 res=0 errno=0
[  428.822159][   T30] audit: type=1804 audit(1759742328.315:12): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4153" name="/newroot/150/memory.events" dev="tmpfs" ino=782 res=1 errno=0
[  429.225220][T20410] : renamed from batadv_slave_1
[  429.687836][T20433] lo speed is unknown, defaulting to 1000
[  429.925656][T20447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.950911][T20447] macvtap0: entered allmulticast mode
[  429.970721][T20447] veth0_macvtap: entered allmulticast mode
[  430.008756][T20433] wg1 speed is unknown, defaulting to 1000
[  430.127051][T20458] tipc: Disabling bearer <eth:syzkaller0>
[  430.270702][T20470] sctp: [Deprecated]: syz.0.4174 (pid 20470) Use of int in maxseg socket option.
[  430.270702][T20470] Use struct sctp_assoc_value instead
[  430.399107][T20477] __nla_validate_parse: 14 callbacks suppressed
[  430.399126][T20477] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4177'.
[  430.424407][T20476] validate_nla: 1 callbacks suppressed
[  430.424425][T20476] netlink: 'syz.1.4176': attribute type 10 has an invalid length.
[  430.444196][T20477] netlink: 'syz.0.4177': attribute type 1 has an invalid length.
[  430.458504][T20476] netlink: 'syz.1.4176': attribute type 17 has an invalid length.
[  430.472187][T20474] netlink: 'syz.0.4177': attribute type 3 has an invalid length.
[  430.490198][T20474] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4177'.
[  430.496209][T20481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'.
[  430.516583][T20476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.650744][T20477] veth3: entered promiscuous mode
[  431.372319][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4192'.
[  431.427876][T20530] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  431.456530][T20528] dvmrp0: entered allmulticast mode
[  431.508159][T20526] dvmrp0: entered allmulticast mode
[  431.612486][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4200'.
[  431.622480][T20539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4197'.
[  431.666206][T20542] vlan5: entered allmulticast mode
[  431.683028][T20542] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode
[  431.819328][ T7826] hid-generic 0005:04F3:0009.0005: unknown main item tag 0x0
[  431.856083][ T7826] hid-generic 0005:04F3:0009.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  431.926293][T20553] bridge0: port 3(ipvlan0) entered blocking state
[  431.947449][T20553] bridge0: port 3(ipvlan0) entered disabled state
[  431.963396][T20553] ipvlan0: entered allmulticast mode
[  431.970222][T20553] bridge0: entered allmulticast mode
[  431.978589][T20553] ipvlan0: left allmulticast mode
[  431.985876][T20553] bridge0: left allmulticast mode
[  432.254425][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4207'.
[  432.437465][T20578] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  432.437996][   T24] IPVS: starting estimator thread 0...
[  432.553951][T20582] IPVS: using max 26 ests per chain, 62400 per kthread
[  432.571579][T20588] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4211'.
[  433.545015][T20660] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4229'.
[  433.691184][T20661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4230'.
[  433.940976][T20680] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.956836][T20678] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  434.157657][T20703] netlink: 'syz.3.4244': attribute type 4 has an invalid length.
[  434.178057][T20709] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  435.234794][T20795] ip6gre0: entered promiscuous mode
[  435.254619][T20795] ip6gre0: entered allmulticast mode
[  435.265143][T20793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  435.291398][T20801] netlink: 'syz.3.4267': attribute type 1 has an invalid length.
[  435.376845][T20801] 8021q: adding VLAN 0 to HW filter on device bond5
[  435.595020][T20822] mac80211_hwsim hwsim36 wlan1: left allmulticast mode
[  435.624749][T20822] netlink: 'syz.0.4270': attribute type 10 has an invalid length.
[  435.700697][T20827] sctp: [Deprecated]: syz.4.4274 (pid 20827) Use of int in max_burst socket option.
[  435.700697][T20827] Use struct sctp_assoc_value instead
[  435.896461][T20843] syzkaller1: entered allmulticast mode
[  435.964302][T20850] syz_tun: entered allmulticast mode
[  436.017593][T20845] syz_tun: left allmulticast mode
[  436.373636][T20880] __nla_validate_parse: 11 callbacks suppressed
[  436.373658][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4292'.
[  436.398268][T20880] netlink: 'syz.0.4292': attribute type 1 has an invalid length.
[  436.465940][T20883] netlink: 'syz.3.4293': attribute type 12 has an invalid length.
[  436.477334][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4293'.
[  436.493097][T20880] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  436.524777][T20880] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  436.538931][T20880] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  436.577049][T20890] netlink: 'syz.2.4296': attribute type 1 has an invalid length.
[  436.613315][T20884] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  436.629424][T20884] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  437.216257][T20937] bond5: (slave bond_slave_1): Device is not our slave
[  437.235731][T20937] bond5: option active_slave: invalid value (bond_slave_1)
[  437.256523][T20937] bond5 (unregistering): Released all slaves
[  437.296808][T20942] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  437.300371][T20948] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4310'.
[  437.318668][T20948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.561417][T20959] bridge3: entered promiscuous mode
[  437.581736][T20959] bridge3: entered allmulticast mode
[  437.867081][T20986] netlink: 'syz.3.4321': attribute type 13 has an invalid length.
[  437.901437][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4321'.
[  437.950865][T20994] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  437.973626][T20999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4324'.
[  438.099071][T21005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4329'.
[  438.268991][T18649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.310374][T18649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.450546][T21026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4335'.
[  438.898242][T21059] netlink: 'syz.4.4344': attribute type 1 has an invalid length.
[  438.913021][T21053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4340'.
[  438.952956][T21059] 8021q: adding VLAN 0 to HW filter on device bond7
[  439.011870][T21066] netlink: 'syz.3.4345': attribute type 10 has an invalid length.
[  439.169343][T21070] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4347'.
[  439.310894][T21084] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4352'.
[  439.842670][T21084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.855717][T21084] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  439.868309][T21084] bond0 (unregistering): Released all slaves
[  440.091490][T21112] netlink: 'syz.4.4358': attribute type 10 has an invalid length.
[  440.525077][T21145] bridge0: entered promiscuous mode
[  440.557271][T21144] bridge0: left promiscuous mode
[  440.613968][T21151] batadv_slave_0: entered promiscuous mode
[  440.938027][T21154] batadv_slave_0: left promiscuous mode
[  440.960997][T21171] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  441.018693][T21174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.136551][T21174] syzkaller0: entered promiscuous mode
[  441.144319][T21174] syzkaller0: entered allmulticast mode
[  441.150865][T21174] tipc: Resetting bearer <eth:syzkaller0>
[  441.178980][T21172] tipc: Resetting bearer <eth:syzkaller0>
[  442.020484][   T24] tipc: Node number set to 730330817
[  443.007973][T21172] tipc: Disabling bearer <eth:syzkaller0>
[  443.025507][T21222] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  443.057392][T21222] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  443.092266][T21222] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  443.181512][T21232] __nla_validate_parse: 13 callbacks suppressed
[  443.181535][T21232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4395'.
[  443.407365][T21256] netlink: 'syz.4.4399': attribute type 3 has an invalid length.
[  443.422476][T21257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  443.444628][T21255] netlink: 'syz.4.4399': attribute type 3 has an invalid length.
[  443.446779][T21256] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4399'.
[  443.475052][T21255] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4399'.
[  443.526547][T21264] netlink: 'syz.3.4402': attribute type 1 has an invalid length.
[  443.538369][T21264] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4402'.
[  443.552043][T21264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.562855][T21264] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  443.574559][T21264] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  443.608285][T21264] tipc: Resetting bearer <eth:syzkaller0>
[  443.754243][T21272] IPVS: nq: FWM 3 0x00000003 - no destination available
[  443.799217][T21284] netlink: 'syz.2.4408': attribute type 1 has an invalid length.
[  443.844276][T21287] netlink: 'syz.2.4408': attribute type 1 has an invalid length.
[  443.978401][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4412'.
[  444.113699][T21300] netlink: 'syz.4.4414': attribute type 10 has an invalid length.
[  444.123477][T21300] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4414'.
[  444.175102][T21308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.211944][T21308] syzkaller0: entered promiscuous mode
[  444.217470][T21308] syzkaller0: entered allmulticast mode
[  444.273297][T21312] pim6reg1: entered promiscuous mode
[  444.287716][T21312] pim6reg1: entered allmulticast mode
[  444.323827][T21315] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  444.336138][T21308] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  444.393889][T21325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4420'.
[  444.467967][T21308] tipc: Resetting bearer <eth:syzkaller0>
[  444.598130][T21307] tipc: Resetting bearer <eth:syzkaller0>
[  444.610710][ T5840] tipc: Node number set to 1486098556
[  444.646098][T21307] tipc: Disabling bearer <eth:syzkaller0>
[  444.672587][T21329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.689328][T21338] syzkaller0: entered promiscuous mode
[  444.721811][T21338] syzkaller0: entered allmulticast mode
[  444.740445][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'.
[  444.821955][T21329] tipc: Resetting bearer <eth:syzkaller0>
[  444.855548][T21328] tipc: Resetting bearer <eth:syzkaller0>
[  444.935324][T21328] tipc: Disabling bearer <eth:syzkaller0>
[  444.986245][T21357] netlink: 'syz.3.4426': attribute type 39 has an invalid length.
[  445.216277][T21370] netlink: 'syz.1.4431': attribute type 1 has an invalid length.
[  445.235545][T21373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4432'.
[  445.248082][T21370] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4431'.
[  445.770977][T21403] mac80211_hwsim hwsim28 �
: renamed from wlan1
[  445.968169][ T5901] hid-generic 0005:16C0:0009.0006: unknown main item tag 0x0
[  445.984029][ T5901] hid-generic 0005:16C0:0009.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  446.389291][T21441] netlink: 'syz.2.4452': attribute type 29 has an invalid length.
[  446.398730][T21441] netlink: 'syz.2.4452': attribute type 29 has an invalid length.
[  447.657852][T21508] tipc: Invalid UDP bearer configuration
[  447.657905][T21508] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  448.083694][T21533] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  448.286918][T21553] __nla_validate_parse: 16 callbacks suppressed
[  448.286938][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'.
[  448.337332][T21557] sctp: [Deprecated]: syz.2.4487 (pid 21557) Use of int in max_burst socket option.
[  448.337332][T21557] Use struct sctp_assoc_value instead
[  448.511322][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4491'.
[  448.522472][T21573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4491'.
[  449.413784][T21596] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4499'.
[  449.745556][T21629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4509'.
[  449.863981][T21636] validate_nla: 1 callbacks suppressed
[  449.864000][T21636] netlink: 'syz.3.4510': attribute type 1 has an invalid length.
[  449.897270][T21636] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.4510'.
[  450.551620][T21666] netlink: 'syz.1.4515': attribute type 39 has an invalid length.
[  450.714401][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4519'.
[  450.730005][T21671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4519'.
[  451.387752][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4525'.
[  451.513793][T21707] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4527'.
[  451.972220][T21732] netlink: 'syz.4.4534': attribute type 1 has an invalid length.
[  451.982035][T21732] netlink: 'syz.4.4534': attribute type 2 has an invalid length.
[  452.040485][T21733] vlan2: entered allmulticast mode
[  452.050770][T21733] erspan0: entered allmulticast mode
[  452.305635][T21745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.606265][T21806] __nla_validate_parse: 13 callbacks suppressed
[  453.606283][T21806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4556'.
[  453.940411][T21827] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4558'.
[  453.978364][T21827] netlink: zone id is out of range
[  453.997554][T21827] netlink: zone id is out of range
[  454.010186][T21827] netlink: get zone limit has 8 unknown bytes
[  454.538443][T21852] netlink: 'syz.4.4565': attribute type 3 has an invalid length.
[  454.844234][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'.
[  454.880513][T21867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4568'.
[  454.942868][T21867] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4568'.
[  454.952450][T21867] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4568'.
[  455.472829][T21891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.480807][T21891] syzkaller0: entered promiscuous mode
[  455.486296][T21891] syzkaller0: entered allmulticast mode
[  455.496884][T21891] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  455.526104][T21893] rdma_rxe: rxe_newlink: failed to add vxcan1
[  455.693969][T21621] Set syz1 is full, maxelem 65536 reached
[  456.034069][T21891] tipc: Resetting bearer <eth:syzkaller0>
[  456.136925][T21898] bond5: option all_slaves_active: invalid value (222)
[  456.168345][T21898] bond5 (unregistering): Released all slaves
[  456.208665][T21890] tipc: Resetting bearer <eth:syzkaller0>
[  456.298093][T21890] tipc: Disabling bearer <eth:syzkaller0>
[  456.361903][T21923] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  456.448254][T21923] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  456.513871][T21929] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4590'.
[  456.606761][T21932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.768450][T21932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  456.853756][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'.
[  456.953801][T21967] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4594'.
[  457.018383][T21967] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  457.122573][T21932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.270100][T21932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  457.320639][T21983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4600'.
[  457.562529][T21990] bond2: (slave bond_slave_1): Device is not bonding slave
[  457.576210][T21990] bond2: option active_slave: invalid value (bond_slave_1)
[  457.588241][T21990] bond2 (unregistering): Released all slaves
[  457.618003][   T73] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.653612][   T73] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.758871][   T73] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.908112][T18659] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.696991][T22055] __nla_validate_parse: 5 callbacks suppressed
[  458.697013][T22055] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4619'.
[  459.045424][T22072] netlink: 'syz.3.4625': attribute type 12 has an invalid length.
[  459.113247][T22076] pim6reg1: entered promiscuous mode
[  459.129386][T22076] pim6reg1: entered allmulticast mode
[  459.188044][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'.
[  459.198867][T22084] netlink: 'syz.4.4627': attribute type 2 has an invalid length.
[  459.228627][T22086] netlink: 'syz.3.4629': attribute type 1 has an invalid length.
[  459.296804][T22086] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.351954][T22094] netlink: 'syz.4.4633': attribute type 228 has an invalid length.
[  459.369105][T22086] veth11: entered promiscuous mode
[  459.412460][T22051] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  459.435801][T22096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4634'.
[  459.495075][T22102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4635'.
[  459.628307][T22108] bond10: option lp_interval: invalid value (0)
[  459.636988][T22108] bond10: option lp_interval: allowed values 1 - 2147483647
[  459.663930][T22108] bond10 (unregistering): Released all slaves
[  459.692716][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4637'.
[  459.838880][T22130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4642'.
[  460.174606][T22150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4648'.
[  460.649239][T22179] syz.3.4654 uses old SIOCAX25GETINFO
[  460.696384][T22181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4656'.
[  460.820678][T22187] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4658'.
[  460.889369][T22197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.930904][T22191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  460.980236][T22197] syzkaller0: entered promiscuous mode
[  460.985747][T22197] syzkaller0: entered allmulticast mode
[  461.006760][T22202] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4662'.
[  461.067514][T22188] tipc: Resetting bearer <eth:syzkaller0>
[  461.155830][T22188] tipc: Disabling bearer <eth:syzkaller0>
[  461.313315][T22221] netlink: 'syz.1.4670': attribute type 13 has an invalid length.
[  461.325917][T22221] macvtap0: entered allmulticast mode
[  461.351647][T22221] macvtap0: refused to change device tx_queue_len
[  461.386829][T22231] netlink: 'syz.1.4670': attribute type 13 has an invalid length.
[  461.395997][T22231] macvtap0: refused to change device tx_queue_len
[  461.495745][T22240] netlink: 'syz.3.4676': attribute type 1 has an invalid length.
[  462.131241][T22281] netlink: 'syz.4.4689': attribute type 4 has an invalid length.
[  462.242197][ T5901] IPVS: starting estimator thread 0...
[  462.268462][T22291] netlink: 'syz.0.4691': attribute type 1 has an invalid length.
[  462.282770][T22291] netlink: 'syz.0.4691': attribute type 1 has an invalid length.
[  462.373499][T22294] IPVS: using max 28 ests per chain, 67200 per kthread
[  462.458100][T22306] sctp: [Deprecated]: syz.3.4693 (pid 22306) Use of int in max_burst socket option.
[  462.458100][T22306] Use struct sctp_assoc_value instead
[  462.630785][ T5859] Bluetooth: hci5: command 0x0406 tx timeout
[  462.809798][T22326] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.867912][T22326] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.918287][T22326] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.986107][T22326] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.117823][T22339] gretap0: entered promiscuous mode
[  463.147574][T22339] 0��{X��: renamed from gretap0
[  463.176688][T22339] 0��{X��: left promiscuous mode
[  463.183620][T22339] 0��{X��: entered allmulticast mode
[  463.196541][T22339] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  463.250033][T22340] bond2: Removing last ns target with arp_interval on
[  463.278899][T22348] team0: No ports can be present during mode change
[  463.300918][T18644] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.356737][T18663] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.403533][T18663] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.423061][T22355] tipc: Enabled bearer <udp:s>, priority 10
[  463.431776][T18663] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.512555][T22363] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  463.584306][T22369] vlan2: entered promiscuous mode
[  463.630630][T22369] bridge0: entered promiscuous mode
[  463.738776][T22377] __nla_validate_parse: 10 callbacks suppressed
[  463.738797][T22377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4714'.
[  463.772011][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'.
[  472.869979][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  481.906456][T22430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4719'.
[  482.115258][T22439] bond2: entered allmulticast mode
[  482.127160][T22439] 8021q: adding VLAN 0 to HW filter on device bond2
[  482.136833][T22439] bridge0: port 4(bond2) entered blocking state
[  482.144314][T22439] bridge0: port 4(bond2) entered disabled state
[  482.154642][T22449] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4723'.
[  482.181667][T22439] bond2: entered promiscuous mode
[  482.198918][T22439] bridge0: port 4(bond2) entered blocking state
[  482.206763][T22439] bridge0: port 4(bond2) entered forwarding state
[  482.312174][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4727'.
[  482.334590][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4729'.
[  482.405068][T22458] netlink: 'syz.3.4730': attribute type 1 has an invalid length.
[  482.482983][T22458] 8021q: adding VLAN 0 to HW filter on device bond6
[  482.521521][T22458] veth15: entered promiscuous mode
[  482.537936][T22458] bond6: (slave veth15): Enslaving as an active interface with an up link
[  482.594886][ T3480] bridge0: port 4(bond2) entered disabled state
[  482.668873][T22479] netlink: 'syz.1.4737': attribute type 1 has an invalid length.
[  482.743775][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4738'.
[  482.753547][T22484] openvswitch: netlink: Flow actions attr not present in new flow.
[  482.766166][T22484] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4738'.
[  482.825103][T22486] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  483.063077][T22505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4744'.
[  483.188755][T22513] netlink: 'syz.2.4746': attribute type 11 has an invalid length.
[  483.212549][T22513] veth1_to_team: mtu less than device minimum
[  483.262447][T22519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.623311][T22543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4755'.
[  483.661046][T22543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4755'.
[  483.847503][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4762'.
[  483.857073][T22556] netlink: 'syz.1.4760': attribute type 6 has an invalid length.
[  484.054049][T22571] netlink: 'syz.3.4763': attribute type 1 has an invalid length.
[  484.084503][T22573] netlink: 'syz.3.4763': attribute type 1 has an invalid length.
[  484.228507][T22585] netlink: 'syz.2.4769': attribute type 6 has an invalid length.
[  484.251255][T22582] netem: change failed
[  484.255970][T22585] netlink: 'syz.2.4769': attribute type 5 has an invalid length.
[  484.265772][T22582] netlink: 'syz.1.4768': attribute type 1 has an invalid length.
[  484.275953][T22589] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  484.285430][T22589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  484.458032][T22596] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  484.623518][T22613] netlink: 'syz.3.4778': attribute type 21 has an invalid length.
[  484.709008][T22618] IPVS: Unknown mcast interface: pimreg0
[  485.067201][T22639] pimreg3: entered allmulticast mode
[  485.500730][T22669] team0: Port device team_slave_1 removed
[  485.606501][T22676] delete_channel: no stack
[  485.814190][T22690] openvswitch: netlink: Actions may not be safe on all matching packets
[  485.971298][T22692] bond3: entered promiscuous mode
[  485.977010][T22692] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.022097][T22701] 8021q: adding VLAN 0 to HW filter on device bond3
[  486.029403][T22701] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  486.036929][T22709] openvswitch: netlink: Key 26 has unexpected len 0 expected 16
[  486.041800][T22701] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  486.073348][T22701] bond3: (slave wireguard0): making interface the new active one
[  486.084900][T22701] wireguard0: entered promiscuous mode
[  486.092966][T22701] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  486.137249][T22714] veth1_macvtap: left promiscuous mode
[  486.143517][T22714] macsec0: entered promiscuous mode
[  486.148957][T22714] macsec0: entered allmulticast mode
[  486.186816][T22717] veth1_macvtap: entered promiscuous mode
[  486.234987][T22717] veth1_macvtap: entered allmulticast mode
[  486.242695][T22717] macsec0: left promiscuous mode
[  486.247949][T22717] macsec0: left allmulticast mode
[  486.254230][T22717] veth1_macvtap: left allmulticast mode
[  486.263121][T22715] veth1_macvtap: left promiscuous mode
[  486.268817][T22715] macsec0: entered promiscuous mode
[  486.275398][T22715] macsec0: entered allmulticast mode
[  486.694802][T22747] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  486.731424][T22747] bond6 (unregistering): Released all slaves
[  486.843981][T22758] bond4 (unregistering): Released all slaves
[  486.853973][T22756] siw: device registration error -23
[  487.111081][T22780] __nla_validate_parse: 21 callbacks suppressed
[  487.111103][T22780] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4831'.
[  487.218103][T22786] x_tables: ip_tables: udp match: only valid for protocol 17
[  487.292588][T22796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4833'.
[  487.370479][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4837'.
[  487.385522][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4837'.
[  487.717213][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4842'.
[  487.734702][T22829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4842'.
[  487.754951][T22828] validate_nla: 2 callbacks suppressed
[  487.754970][T22828] netlink: 'syz.2.4842': attribute type 30 has an invalid length.
[  487.769217][T22829] netlink: 'syz.2.4842': attribute type 30 has an invalid length.
[  487.780655][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4842'.
[  487.791704][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4842'.
[  487.901215][T22838] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy�ڇv���[�D�w��z
[  488.229783][   T51] Bluetooth: hci2: command 0x041b tx timeout
[  488.233183][T22858] netlink: 'syz.0.4851': attribute type 1 has an invalid length.
[  488.316915][T22865] bond4: (slave bridge5): making interface the new active one
[  488.345793][T22870] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4855'.
[  488.349038][T22865] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  488.368654][T22867] tipc: MTU too low for tipc bearer
[  488.498550][T22878] netlink: 'syz.3.4858': attribute type 4 has an invalid length.
[  488.529157][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4858'.
[  489.472347][T22927] netlink: 'syz.1.4873': attribute type 1 has an invalid length.
[  489.657579][T22941] bond6: (slave bridge9): making interface the new active one
[  489.678541][T22941] bond6: (slave bridge9): Enslaving as an active interface with an up link
[  489.694861][T22940] syzkaller1: entered promiscuous mode
[  489.705088][T22940] syzkaller1: entered allmulticast mode
[  489.949088][T22969] netlink: 'syz.3.4884': attribute type 1 has an invalid length.
[  489.957233][T22968] netlink: 'syz.3.4884': attribute type 1 has an invalid length.
[  490.441109][T22985] dvmrp0: left allmulticast mode
[  490.501477][T22986] sock: sock_timestamping_bind_phc: sock not bind to device
[  490.648193][T23008] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.656079][T23008] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.478173][T23065] dvmrp0: entered allmulticast mode
[  491.562327][T23071] syz_tun: entered allmulticast mode
[  491.752032][T23083] netlink: 'syz.4.4910': attribute type 5 has an invalid length.
[  491.779429][T23070] syz_tun: left allmulticast mode
[  492.173815][T23118] __nla_validate_parse: 22 callbacks suppressed
[  492.173834][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4920'.
[  492.402505][T23137] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0
[  492.411469][T23137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.427160][T23138] netem: change failed
[  492.439402][T23138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4926'.
[  492.466223][T23138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4926'.
[  492.711357][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  492.746372][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4932'.
[  492.757065][T23156] netdevsim0: entered promiscuous mode
[  492.763346][T23156] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4932'.
[  492.935983][T23172] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4936'.
[  493.069743][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4937'.
[  493.225975][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4941'.
[  493.248318][T23189] netlink: 'syz.2.4940': attribute type 1 has an invalid length.
[  493.281499][T23191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4942'.
[  493.281863][T23189] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4940'.
[  493.647260][T23213] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  493.965309][T23228] netlink: 'syz.0.4952': attribute type 10 has an invalid length.
[  493.993490][T23228] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  494.059647][T23228] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  494.069373][T23228] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  494.185795][T23237] netlink: 'syz.1.4956': attribute type 21 has an invalid length.
[  494.266939][T23237] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  494.283389][T23237] bond7 (unregistering): Released all slaves
[  494.807147][T23274] lo speed is unknown, defaulting to 1000
[  494.929652][T23279] openvswitch: netlink: Message has 5372 unknown bytes.
[  494.937517][T23279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.047104][T23288] netlink: 'syz.1.4974': attribute type 10 has an invalid length.
[  495.076792][T23288] veth1_macvtap: left promiscuous mode
[  495.122678][T23288] team0: Device veth1_macvtap failed to register rx_handler
[  495.140116][T23274] wg1 speed is unknown, defaulting to 1000
[  495.327501][T23299] syzkaller0: entered promiscuous mode
[  495.340216][T23299] syzkaller0: entered allmulticast mode
[  495.394108][T23308] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  496.204384][T23362] 
: renamed from bridge_slave_0 (while UP)
[  496.473866][T23375] macvlan0: entered promiscuous mode
[  496.482392][T23375] batadv0: entered promiscuous mode
[  496.489139][T23375] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  496.514197][T23375] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  496.527450][T23375] hsr1: entered allmulticast mode
[  496.557462][T23375] macvlan0: entered allmulticast mode
[  496.567589][T23375] batadv0: entered allmulticast mode
[  496.585954][T23375] macvlan0: left promiscuous mode
[  496.632781][T23375] batadv0: left promiscuous mode
[  497.623181][T23424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  497.662024][T23412] hsr0 speed is unknown, defaulting to 1000
[  497.678432][T23412] hsr0 speed is unknown, defaulting to 1000
[  497.763760][T23428] netlink: 'syz.2.5015': attribute type 1 has an invalid length.
[  497.780143][T23412] hsr0 speed is unknown, defaulting to 1000
[  497.828597][T23412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  497.893910][T23429] veth11: entered promiscuous mode
[  497.907253][T23429] bond4: (slave veth11): Enslaving as a backup interface with a down link
[  497.922742][T23436] netlink: 'syz.0.5017': attribute type 1 has an invalid length.
[  497.960231][T23412] hsr0 speed is unknown, defaulting to 1000
[  497.987506][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.002064][T23440] "syz.2.5018" (23440) uses obsolete ecb(arc4) skcipher
[  498.028556][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.058364][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.083805][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.099340][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.108522][T23445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  498.115908][T23445] IPv6: NLM_F_CREATE should be set when creating new route
[  498.120969][T23449] "syz.2.5018" (23449) uses obsolete ecb(arc4) skcipher
[  498.162619][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.217311][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.232824][T23412] hsr0 speed is unknown, defaulting to 1000
[  498.389452][T18659] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82
[  498.419452][T23474] __nla_validate_parse: 9 callbacks suppressed
[  498.425903][T23474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5026'.
[  498.608081][T23475] netlink: 'syz.0.5027': attribute type 10 has an invalid length.
[  498.698132][T23490] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  499.286318][T23508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5034'.
[  499.363081][T23510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.422357][T23506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5031'.
[  499.632444][T23532] sctp: [Deprecated]: syz.0.5040 (pid 23532) Use of struct sctp_assoc_value in delayed_ack socket option.
[  499.632444][T23532] Use struct sctp_sack_info instead
[  499.681667][T23539] netlink: 'syz.3.5042': attribute type 10 has an invalid length.
[  499.694631][T23545] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5043'.
[  499.731798][T23539] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  499.766278][T23549] netlink: 'syz.0.5045': attribute type 4 has an invalid length.
[  499.797803][T23549] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5045'.
[  500.113981][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5052'.
[  500.141378][T23571] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  500.334237][T23589] netlink: 'syz.3.5058': attribute type 29 has an invalid length.
[  500.408721][T23593] netlink: 548 bytes leftover after parsing attributes in process `syz.3.5058'.
[  500.410334][T23590] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5057'.
[  500.509278][T23596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5061'.
[  500.546348][T23596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5061'.
[  500.594111][T23607] netlink: 'syz.0.5063': attribute type 1 has an invalid length.
[  500.626981][T23607] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  501.556529][T23666] netlink: 'syz.3.5081': attribute type 1 has an invalid length.
[  501.585799][T23666] netlink: 'syz.3.5081': attribute type 1 has an invalid length.
[  501.752078][T23682] netlink: 'syz.3.5085': attribute type 29 has an invalid length.
[  501.880587][T23688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.041852][T23696] netlink: 'syz.4.5088': attribute type 20 has an invalid length.
[  502.053073][T23696] netlink: 'syz.4.5088': attribute type 20 has an invalid length.
[  502.526183][T23716] syzkaller0: entered promiscuous mode
[  502.539035][T23716] syzkaller0: entered allmulticast mode
[  502.682351][T23719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.690244][T23719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.698770][T23719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.706731][T23719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.579263][T23766] __nla_validate_parse: 11 callbacks suppressed
[  503.579283][T23766] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5110'.
[  503.748035][T23781] validate_nla: 1 callbacks suppressed
[  503.748054][T23781] netlink: 'syz.1.5115': attribute type 29 has an invalid length.
[  503.826842][T23785] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5115'.
[  503.836859][T23785] netlink: 'syz.1.5115': attribute type 10 has an invalid length.
[  503.845263][T23785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5115'.
[  503.856979][T23787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5116'.
[  504.049237][T23778] team0 (unregistering): Port device team_slave_0 removed
[  504.062260][T23778] team0 (unregistering): Port device team_slave_1 removed
[  504.171489][T23781] netlink: 'syz.1.5115': attribute type 29 has an invalid length.
[  504.248889][T23797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5119'.
[  504.254971][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5118'.
[  504.392646][T23801] netlink: 'syz.1.5120': attribute type 1 has an invalid length.
[  504.471315][T23806] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  504.477965][T23806] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  504.537695][T23805] 8021q: adding VLAN 0 to HW filter on device bond8
[  504.563827][T23805] bond7: (slave bond8): making interface the new active one
[  504.572716][T23805] bond7: (slave bond8): Enslaving as an active interface with an up link
[  504.594316][T23813] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  504.617047][T23813] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  505.018939][T23834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5131'.
[  505.257776][T23842] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  505.367634][T23855] netlink: 'syz.3.5138': attribute type 1 has an invalid length.
[  505.476425][T23860] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5140'.
[  505.518194][T23855] bond7 (unregistering): Released all slaves
[  505.618965][T23870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5145'.
[  505.637014][T23852] ip6tnl3: entered promiscuous mode
[  505.644166][T23874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5144'.
[  505.650938][T23852] ip6tnl3: entered allmulticast mode
[  506.056878][T23903] netlink: 'syz.1.5154': attribute type 1 has an invalid length.
[  506.538978][T23923] 8021q: adding VLAN 0 to HW filter on device team0
[  506.583488][T23923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  506.793756][T23934] netlink: 'syz.4.5166': attribute type 39 has an invalid length.
[  506.805952][T23937] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  506.955049][T23947] netlink: 'syz.1.5170': attribute type 1 has an invalid length.
[  506.995788][T23946] veth1: entered promiscuous mode
[  507.106761][T23956] netlink: 'syz.3.5173': attribute type 1 has an invalid length.
[  507.118136][T23956] netlink: 'syz.3.5173': attribute type 1 has an invalid length.
[  507.438457][T23979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.449012][T23967] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode
[  507.462086][T23967] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode
[  507.493362][T23967] tipc: Resetting bearer <eth:syzkaller0>
[  507.516568][T23967] tipc: Resetting bearer <eth:syzkaller0>
[  507.719939][T23993] IPv6: NLM_F_REPLACE set, but no existing node found!
[  507.887344][T23996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.911620][T23996] syzkaller0: entered promiscuous mode
[  507.927409][T23996] syzkaller0: entered allmulticast mode
[  507.962921][T23996] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  508.014304][T18644] tipc: Resetting bearer <eth:syzkaller0>
[  508.089197][T23996] tipc: Resetting bearer <eth:syzkaller0>
[  508.128055][T23995] tipc: Resetting bearer <eth:syzkaller0>
[  508.216322][T23995] tipc: Disabling bearer <eth:syzkaller0>
[  508.866972][T24061] validate_nla: 3 callbacks suppressed
[  508.866989][T24061] netlink: 'syz.0.5202': attribute type 10 has an invalid length.
[  508.868988][T24062] netlink: 'syz.1.5203': attribute type 83 has an invalid length.
[  508.873729][T24061] veth0_vlan: entered allmulticast mode
[  508.967410][T24061] veth0_vlan: left promiscuous mode
[  509.002484][T24061] veth0_vlan: entered promiscuous mode
[  509.038390][T24061] team0: Device veth0_vlan failed to register rx_handler
[  509.490212][T24098] __nla_validate_parse: 32 callbacks suppressed
[  509.490231][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5212'.
[  509.541333][T24098] pim6reg1: entered promiscuous mode
[  509.553095][T24098] pim6reg1: entered allmulticast mode
[  509.614741][T18663] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  510.667331][T24145] batman_adv: batadv0: Adding interface: netdevsim0
[  510.678768][T24145] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.726350][T24145] batman_adv: batadv0: Interface activated: netdevsim0
[  510.764180][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5225'.
[  511.100912][T24173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5235'.
[  511.265562][T24184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5239'.
[  511.287756][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5239'.
[  511.408481][T24192] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5242'.
[  511.421861][T24192] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5242'.
[  511.433222][T24192] netlink: 'syz.3.5242': attribute type 6 has an invalid length.
[  511.456198][T24193] netlink: 'syz.4.5241': attribute type 29 has an invalid length.
[  511.465346][T24192] netlink: 'syz.3.5242': attribute type 5 has an invalid length.
[  511.474703][T24193] netlink: 'syz.4.5241': attribute type 29 has an invalid length.
[  511.490068][T24192] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5242'.
[  511.512402][T24199] bridge_slave_0: left allmulticast mode
[  511.528412][T24199] bridge_slave_0: left promiscuous mode
[  511.538913][T24199] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.581022][T24199] team0: Port device team_slave_0 removed
[  511.623751][T24199] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.663921][T24199] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.686488][T24199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  511.749448][T24207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  511.766135][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5244'.
[  511.772498][T24207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5246'.
[  512.478692][T24238] 8021q: adding VLAN 0 to HW filter on device bond10
[  512.532216][T24241] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  512.556228][T24247] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  513.005770][T24274] netlink: 'syz.4.5266': attribute type 5 has an invalid length.
[  513.174999][T24289] delete_channel: no stack
[  513.291439][T24294] syzkaller0: entered promiscuous mode
[  513.308537][T24294] syzkaller0: entered allmulticast mode
[  513.328014][T24292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.436202][T24306] tipc: Resetting bearer <eth:syzkaller0>
[  513.474564][T24291] tipc: Resetting bearer <eth:syzkaller0>
[  513.658710][T24291] tipc: Disabling bearer <eth:syzkaller0>
[  513.671975][T24320] bridge: RTM_NEWNEIGH with invalid ether address
[  513.717169][T24325] lo speed is unknown, defaulting to 1000
[  513.950728][T24325] wg1 speed is unknown, defaulting to 1000
[  513.958293][T24325] hsr0 speed is unknown, defaulting to 1000
[  514.151898][T24344] syzkaller0: entered promiscuous mode
[  514.157503][T24344] syzkaller0: entered allmulticast mode
[  516.497270][T24383] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  516.645118][T24402] __nla_validate_parse: 8 callbacks suppressed
[  516.645138][T24402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5295'.
[  516.705933][T24405] sctp: [Deprecated]: syz.1.5296 (pid 24405) Use of struct sctp_assoc_value in delayed_ack socket option.
[  516.705933][T24405] Use struct sctp_sack_info instead
[  516.759017][T24410] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  516.797516][T24412] netlink: 'syz.3.5299': attribute type 1 has an invalid length.
[  516.820194][T24412] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5299'.
[  517.348751][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5311'.
[  517.377070][T24460] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5314'.
[  517.400414][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5314'.
[  517.574196][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5321'.
[  517.925405][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'.
[  517.949327][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5328'.
[  518.098950][T24515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5330'.
[  518.154383][T24523] tls_set_device_offload: netdev not found
[  518.280538][T24535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5337'.
[  518.471798][T24551] netlink: 'syz.3.5340': attribute type 10 has an invalid length.
[  518.575063][T24560] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  518.743727][T24577] netlink: 'syz.4.5349': attribute type 10 has an invalid length.
[  518.804220][T24579] netlink: 'syz.1.5347': attribute type 11 has an invalid length.
[  519.678589][T24609] bond6: option mode: invalid value (133)
[  519.713259][T24609] bond6 (unregistering): Released all slaves
[  520.165942][T24638] netlink: 'syz.3.5364': attribute type 29 has an invalid length.
[  521.151912][T24710] netlink: 'syz.2.5383': attribute type 3 has an invalid length.
[  521.380434][T24736] netlink: 'syz.2.5392': attribute type 10 has an invalid length.
[  521.415282][T24736] netlink: 'syz.2.5392': attribute type 10 has an invalid length.
[  521.451144][T24736] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  521.759243][T24769] __nla_validate_parse: 13 callbacks suppressed
[  521.759270][T24769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5399'.
[  521.787848][T24769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.870685][T24777] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5402'.
[  522.427293][T24803] delete_channel: no stack
[  522.431508][T24800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5409'.
[  522.435909][T24803] delete_channel: no stack
[  522.453477][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5410'.
[  522.488431][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5410'.
[  522.498189][T24805] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5411'.
[  522.571635][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5410'.
[  522.764333][T24825] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5420'.
[  522.802378][T24831] veth0_to_batadv: mtu less than device minimum
[  522.821891][T24833] netlink: 'syz.2.5418': attribute type 1 has an invalid length.
[  522.839292][T24835] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5420'.
[  522.854610][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5418'.
[  523.692391][T24891] netlink: 'syz.2.5439': attribute type 5 has an invalid length.
[  523.731960][T24891] geneve0: entered promiscuous mode
[  523.741002][T24891] geneve0: entered allmulticast mode
[  523.750806][T18671] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  523.779815][T18671] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  523.817086][T18671] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  524.848267][T24964] netlink: 'syz.1.5466': attribute type 10 has an invalid length.
[  524.858080][T24964] bond0: (slave dummy0): Releasing backup interface
[  524.889303][T24964] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  524.903273][T24970] netlink: 'syz.1.5466': attribute type 10 has an invalid length.
[  524.905229][T24964] team0: Failed to send options change via netlink (err -105)
[  524.926485][T24964] team0: Port device dummy0 added
[  524.946551][T24970] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  524.966920][T24975] block nbd8: Unsupported socket: should be TCP or UNIX.
[  524.994581][T24970] team0: Failed to send options change via netlink (err -105)
[  525.020513][T24970] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  525.031905][T24970] team0: Port device dummy0 removed
[  525.045660][T24970] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  525.264196][T24992] netem: unknown loss type 0
[  525.270937][T24992] netem: change failed
[  525.835518][T25036] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  525.876829][T25038] vlan1: entered allmulticast mode
[  525.890406][T25038] veth0_vlan: entered allmulticast mode
[  526.260934][T25059] syzkaller1: entered promiscuous mode
[  526.266452][T25059] syzkaller1: entered allmulticast mode
[  526.519013][T25076] netlink: 'syz.4.5493': attribute type 1 has an invalid length.
[  526.536207][T25081] netlink: 'syz.3.5498': attribute type 1 has an invalid length.
[  526.615420][T25083] netlink: 'syz.0.5497': attribute type 1 has an invalid length.
[  526.686128][T25081] 8021q: adding VLAN 0 to HW filter on device bond7
[  526.792997][T25087] veth19: entered promiscuous mode
[  526.805329][T25087] bond7: (slave veth19): Enslaving as an active interface with a down link
[  526.877241][T25085] vlan2: entered allmulticast mode
[  526.883597][T25085] bond7: entered allmulticast mode
[  526.895056][T25085] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  527.241778][T25112] IPv6: sit1: Disabled Multicast RS
[  527.258262][T25112] __nla_validate_parse: 15 callbacks suppressed
[  527.258284][T25112] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5507'.
[  527.425368][T25121] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  527.459693][T25121] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  527.468320][T25120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5511'.
[  527.660030][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5515'.
[  527.688927][T25136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5515'.
[  528.123285][T25162] netlink: 'syz.4.5520': attribute type 1 has an invalid length.
[  528.297825][T25136] gretap2: entered promiscuous mode
[  528.313437][T25136] gretap2: entered allmulticast mode
[  528.393990][T25162] 8021q: adding VLAN 0 to HW filter on device bond11
[  528.897716][T25190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.975626][T25190] netlink: 'syz.0.5528': attribute type 10 has an invalid length.
[  528.989064][T25195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5529'.
[  529.061318][T25197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.085068][T25197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.151601][T25197] batman_adv: batadv0: Removing interface: 
[  529.214976][T25205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5535'.
[  529.266097][T25212] batadv_slave_1: entered promiscuous mode
[  529.273280][T25212] batadv_slave_1: entered allmulticast mode
[  529.290214][T25215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5536'.
[  529.326886][T25215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5536'.
[  529.340754][T25215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5536'.
[  529.386226][T25219] syzkaller1: entered promiscuous mode
[  529.393195][T25219] syzkaller1: entered allmulticast mode
[  529.562200][T25221] bond8 (unregistering): Released all slaves
[  529.722560][T25189] tipc: Disabling bearer <eth:syzkaller0>
[  529.793755][T25244] netlink: 'syz.1.5546': attribute type 2 has an invalid length.
[  529.813213][T25244] : entered promiscuous mode
[  529.903536][T25246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5547'.
[  529.911968][T25248] netlink: 'syz.1.5548': attribute type 10 has an invalid length.
[  529.993003][T25251] netlink: 'syz.0.5549': attribute type 20 has an invalid length.
[  530.002619][T25251] netlink: 'syz.0.5549': attribute type 20 has an invalid length.
[  530.014809][T25251] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy�ڇv���[�D�w��zR'
[  530.027472][T25251] CPU: 1 UID: 0 PID: 25251 Comm: syz.0.5549 Not tainted syzkaller #0 PREEMPT(full) 
[  530.027503][T25251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  530.027521][T25251] Call Trace:
[  530.027529][T25251]  <TASK>
[  530.027538][T25251]  dump_stack_lvl+0x189/0x250
[  530.027575][T25251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.027599][T25251]  ? __pfx__printk+0x10/0x10
[  530.027632][T25251]  ? kernfs_path_from_node+0x2f/0x290
[  530.027651][T25251]  ? kernfs_path_from_node+0x250/0x290
[  530.027669][T25251]  ? kernfs_path_from_node+0x2f/0x290
[  530.027691][T25251]  sysfs_warn_dup+0x8e/0xa0
[  530.027720][T25251]  sysfs_do_create_link_sd+0xc0/0x110
[  530.027740][T25251]  device_add_class_symlinks+0x1cf/0x240
[  530.027772][T25251]  device_add+0x475/0xb50
[  530.027805][T25251]  wiphy_register+0x1c81/0x2aa0
[  530.027852][T25251]  ? __pfx_wiphy_register+0x10/0x10
[  530.027875][T25251]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  530.027915][T25251]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  530.027951][T25251]  ieee80211_register_hw+0x3473/0x40d0
[  530.028000][T25251]  ? ieee80211_register_hw+0x14a1/0x40d0
[  530.028039][T25251]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  530.028066][T25251]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  530.028100][T25251]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  530.028131][T25251]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  530.028171][T25251]  ? __hrtimer_setup+0x187/0x210
[  530.028202][T25251]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  530.028233][T25251]  mac80211_hwsim_new_radio+0x2f7a/0x5210
[  530.028294][T25251]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  530.028315][T25251]  ? trace_kmalloc+0x1f/0xd0
[  530.028335][T25251]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  530.028361][T25251]  ? kstrndup+0xbf/0x160
[  530.028404][T25251]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  530.028434][T25251]  ? __pfx___nla_validate_parse+0x10/0x10
[  530.028471][T25251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  530.028511][T25251]  ? __nla_parse+0x40/0x60
[  530.028535][T25251]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  530.028575][T25251]  genl_family_rcv_msg_doit+0x212/0x300
[  530.028612][T25251]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  530.028657][T25251]  ? bpf_lsm_capable+0x9/0x20
[  530.028679][T25251]  ? security_capable+0x7e/0x2e0
[  530.028713][T25251]  genl_rcv_msg+0x60e/0x790
[  530.028748][T25251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  530.028774][T25251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  530.028816][T25251]  netlink_rcv_skb+0x205/0x470
[  530.028835][T25251]  ? __lock_acquire+0xab9/0xd20
[  530.028854][T25251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  530.028882][T25251]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  530.028927][T25251]  ? down_read+0x1ad/0x2e0
[  530.028951][T25251]  genl_rcv+0x28/0x40
[  530.028974][T25251]  netlink_unicast+0x82c/0x9e0
[  530.029014][T25251]  ? __pfx_netlink_unicast+0x10/0x10
[  530.029048][T25251]  ? netlink_sendmsg+0x642/0xb30
[  530.029067][T25251]  ? skb_put+0x11b/0x210
[  530.029094][T25251]  netlink_sendmsg+0x805/0xb30
[  530.029127][T25251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.029151][T25251]  ? aa_sock_msg_perm+0xf1/0x1d0
[  530.029180][T25251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  530.029215][T25251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.029238][T25251]  __sock_sendmsg+0x219/0x270
[  530.029272][T25251]  ____sys_sendmsg+0x505/0x830
[  530.029303][T25251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  530.029337][T25251]  ? import_iovec+0x74/0xa0
[  530.029364][T25251]  ___sys_sendmsg+0x21f/0x2a0
[  530.029392][T25251]  ? __pfx____sys_sendmsg+0x10/0x10
[  530.029464][T25251]  ? __fget_files+0x2a/0x420
[  530.029489][T25251]  ? __fget_files+0x3a0/0x420
[  530.029529][T25251]  __x64_sys_sendmsg+0x19b/0x260
[  530.029558][T25251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  530.029597][T25251]  ? rcu_is_watching+0x15/0xb0
[  530.029626][T25251]  ? do_syscall_64+0xbe/0x3b0
[  530.029653][T25251]  do_syscall_64+0xfa/0x3b0
[  530.029675][T25251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.029697][T25251]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  530.029718][T25251]  ? clear_bhb_loop+0x60/0xb0
[  530.029744][T25251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.029764][T25251] RIP: 0033:0x7f70cd18eec9
[  530.029783][T25251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.029802][T25251] RSP: 002b:00007f70cb3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  530.029825][T25251] RAX: ffffffffffffffda RBX: 00007f70cd3e5fa0 RCX: 00007f70cd18eec9
[  530.029841][T25251] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  530.029854][T25251] RBP: 00007f70cd211f91 R08: 0000000000000000 R09: 0000000000000000
[  530.029868][T25251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.029880][T25251] R13: 00007f70cd3e6038 R14: 00007f70cd3e5fa0 R15: 00007ffc5eaf8e68
[  530.029918][T25251]  </TASK>
[  530.654826][T25260] netlink: zone id is out of range
[  530.820848][T25275] netlink: 'syz.4.5556': attribute type 1 has an invalid length.
[  531.126811][T25290] syzkaller1: entered promiscuous mode
[  531.149239][T25290] syzkaller1: entered allmulticast mode
[  531.294273][T25303] gtp0: entered promiscuous mode
[  531.318729][T25303] gtp0: entered allmulticast mode
[  531.347939][T25304] gtp1: entered promiscuous mode
[  531.359901][T25304] gtp1: entered allmulticast mode
[  531.442994][T25310] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  531.499364][T25310] bond5 (unregistering): Released all slaves
[  531.663293][T25326] syzkaller1: entered promiscuous mode
[  531.668814][T25326] syzkaller1: entered allmulticast mode
[  531.876822][T25339] netlink: 'syz.0.5575': attribute type 1 has an invalid length.
[  532.214495][T25364] batadv_slave_1: left promiscuous mode
[  532.225204][T25364] batadv_slave_1: left allmulticast mode
[  532.242997][T25364] batman_adv: batadv0: Interface deactivated: netdevsim0
[  532.264157][T25364] geneve2: left promiscuous mode
[  532.271089][T25364] geneve2: left allmulticast mode
[  532.285442][T25368] netlink: 'syz.0.5585': attribute type 2 has an invalid length.
[  532.321657][T25364] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode
[  532.337304][T25364] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode
[  532.376290][T25364] veth11: left promiscuous mode
[  532.420230][T25364] veth15: left promiscuous mode
[  532.448415][T25364] veth19: left promiscuous mode
[  532.477148][T25364] gtp0: left promiscuous mode
[  532.498344][T25364] gtp0: left allmulticast mode
[  532.516961][T25364] gtp1: left promiscuous mode
[  532.523719][T25364] gtp1: left allmulticast mode
[  532.534317][T25371] sit0: left promiscuous mode
[  532.569377][T25371] gtp0: left promiscuous mode
[  532.577237][T25371] vlan2: left promiscuous mode
[  532.583030][T25371] bridge0: left promiscuous mode
[  532.590547][T25371] mac80211_hwsim hwsim26 syzkaller0: left promiscuous mode
[  532.598428][T25371] tipc: Resetting bearer <eth:syzkaller0>
[  532.608172][T18656] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.628458][T25381] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  532.651815][T18663] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.670088][T18663] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.732016][T18663] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.848745][T25401] __nla_validate_parse: 11 callbacks suppressed
[  532.848766][T25401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5594'.
[  532.866797][T25401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5594'.
[  532.963695][T25404] bridge12: the hash_elasticity option has been deprecated and is always 16
[  533.057204][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5595'.
[  533.097087][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5597'.
[  533.111504][T25410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5597'.
[  533.298353][T25419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5599'.
[  533.599430][T25435] sock: sock_timestamping_bind_phc: sock not bind to device
[  533.723994][T25440] netlink: 'syz.4.5608': attribute type 10 has an invalid length.
[  533.724725][T25439] netlink: 'syz.0.5607': attribute type 10 has an invalid length.
[  533.787818][T25439] tipc: Disabling bearer <ib:caif0>
[  534.088444][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5609'.
[  534.191776][T25474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5618'.
[  534.272320][T25474] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  534.295927][T25478] netlink: 'syz.4.5619': attribute type 1 has an invalid length.
[  534.326997][T25480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5620'.
[  534.338733][T25480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5620'.
[  534.397844][T25478] 8021q: adding VLAN 0 to HW filter on device bond12
[  534.494751][T25481] 8021q: adding VLAN 0 to HW filter on device bond12
[  534.522336][T25481] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  534.534860][T25481] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  534.596724][T25485] veth11: entered promiscuous mode
[  534.609208][T25485] bond12: (slave veth11): Enslaving as an active interface with a down link
[  534.644065][T25478] vlan3: entered allmulticast mode
[  534.650271][T25478] bond12: entered allmulticast mode
[  534.967527][T25514] gretap0: entered promiscuous mode
[  534.991059][T25514] 0��{X��: renamed from gretap0
[  535.007784][T25514] 0��{X��: left promiscuous mode
[  535.029699][T25514] 0��{X��: entered allmulticast mode
[  535.052657][T25514] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  535.087445][T25527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.167338][T25515] bond10: Removing last ns target with arp_interval on
[  535.184008][T25527] syzkaller0: entered promiscuous mode
[  535.213388][T25527] syzkaller0: entered allmulticast mode
[  535.246092][T25536] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  535.270623][T25533] syzkaller1: entered promiscuous mode
[  535.276138][T25533] syzkaller1: entered allmulticast mode
[  535.287054][T25525] lo speed is unknown, defaulting to 1000
[  535.298703][T25527] tipc: Resetting bearer <eth:syzkaller0>
[  535.352109][T25524] tipc: Resetting bearer <eth:syzkaller0>
[  535.403047][T25524] tipc: Disabling bearer <eth:syzkaller0>
[  535.840292][T25525] wg1 speed is unknown, defaulting to 1000
[  535.867447][T25525] hsr0 speed is unknown, defaulting to 1000
[  535.947048][T25569] netlink: 'syz.3.5648': attribute type 10 has an invalid length.
[  535.965441][T25569] openvswitch: netlink: Flow key attr not present in new flow.
[  536.319767][T25592] netlink: 'syz.0.5655': attribute type 1 has an invalid length.
[  536.358933][T25592] netlink: 'syz.0.5655': attribute type 3 has an invalid length.
[  536.375538][T25586] syzkaller1: entered promiscuous mode
[  536.387367][T25586] syzkaller1: entered allmulticast mode
[  536.601510][T25612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  536.636648][T25612] bridge0: port 3(vlan0) entered blocking state
[  536.647189][T25612] bridge0: port 3(vlan0) entered disabled state
[  536.656963][T25612] vlan0: entered allmulticast mode
[  536.663112][T25612] bridge0: entered allmulticast mode
[  536.670815][T25612] vlan0: left allmulticast mode
[  536.675871][T25612] bridge0: left allmulticast mode
[  536.882724][T25619] bond13: Unable to set peer notification delay as MII monitoring is disabled
[  536.894644][T25619] bond13 (unregistering): Released all slaves
[  537.378471][T25646] netlink: 'syz.0.5669': attribute type 23 has an invalid length.
[  538.208090][T25702] __nla_validate_parse: 79 callbacks suppressed
[  538.208111][T25702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5686'.
[  538.519265][T25706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5688'.
[  538.530589][T25713] veth0: entered promiscuous mode
[  538.548308][T25715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5689'.
[  538.551591][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5692'.
[  538.618475][T25713] veth0 (unregistering): left promiscuous mode
[  538.733193][T25727] IPVS: Error connecting to the multicast addr
[  538.905514][T25740] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  538.931591][T25740] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  539.368623][T25777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5710'.
[  539.544801][T25790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5713'.
[  539.875151][T25810] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5720'.
[  539.880308][T25788] team0 (unregistering): Port device team_slave_0 removed
[  539.890816][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5718'.
[  539.915126][T25788] team0 (unregistering): Port device team_slave_1 removed
[  539.943586][T25788] team0 (unregistering): Port device veth0_virt_wifi removed
[  540.023872][T25813] 8021q: VLANs not supported on ip_vti0
[  540.305575][T25837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5725'.
[  540.652773][T25865] syzkaller1: entered promiscuous mode
[  540.658289][T25865] syzkaller1: entered allmulticast mode
[  540.752831][T25873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5736'.
[  540.960796][T25886] mac80211_hwsim hwsim26 syzkaller0: left allmulticast mode
[  540.978771][T25886] tipc: Resetting bearer <eth:syzkaller0>
[  541.046958][T25895] netlink: 'syz.3.5744': attribute type 3 has an invalid length.
[  541.151148][T25902] netlink: 'syz.2.5747': attribute type 1 has an invalid length.
[  541.559389][T25928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.771368][T25936] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  541.806866][T25936] bond11 (unregistering): Released all slaves
[  541.923684][T25941] bond5: option mode: invalid value (133)
[  541.934455][T25941] bond5 (unregistering): Released all slaves
[  542.013383][T25949] block nbd8: Unsupported socket: should be TCP or UNIX.
[  542.253368][T25962] netlink: 'syz.3.5760': attribute type 11 has an invalid length.
[  542.673089][T25981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.692036][T25991] netlink: 'syz.3.5765': attribute type 1 has an invalid length.
[  542.692854][T25981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  542.716350][T25981] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  542.731918][T25981] bond0 (unregistering): Released all slaves
[  542.750797][T25992] vlan0: entered promiscuous mode
[  542.755991][T25992] vlan0: entered allmulticast mode
[  542.761444][T25992] veth0_vlan: entered allmulticast mode
[  542.812430][T25995] 8021q: adding VLAN 0 to HW filter on device bond8
[  542.846208][T25997] nbd: nbd1 already in use
[  542.989006][T26002] delete_channel: no stack
[  543.020762][T26008] netlink: 'syz.2.5772': attribute type 6 has an invalid length.
[  543.028644][T26008] netlink: 'syz.2.5772': attribute type 5 has an invalid length.
[  543.044979][T26008] netlink: 'syz.2.5772': attribute type 6 has an invalid length.
[  543.055911][T26008] netlink: 'syz.2.5772': attribute type 5 has an invalid length.
[  543.627265][T26047] __nla_validate_parse: 16 callbacks suppressed
[  543.627286][T26047] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5783'.
[  543.786678][T26052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5784'.
[  543.797450][T26052] IPVS: set_ctl: invalid protocol: 103 172.20.20.45:20003
[  544.028492][T26069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5790'.
[  544.083591][T26072] netlink: 'syz.3.5791': attribute type 1 has an invalid length.
[  544.531588][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5799'.
[  544.600143][T26074] team0 (unregistering): Port device team_slave_0 removed
[  544.667925][T26074] team0 (unregistering): Port device team_slave_1 removed
[  544.793034][T26100] batadv2: left allmulticast mode
[  544.798183][T26100] batadv2: left promiscuous mode
[  544.807702][T26100] bridge0: port 2(batadv2) entered disabled state
[  545.054086][T26128] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5804'.
[  545.157873][T26128] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5804'.
[  545.311274][T26145] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5813'.
[  545.667054][T26175] : renamed from hsr0
[  545.794495][T26181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5823'.
[  546.207605][T26203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'.
[  546.217608][T26203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5831'.
[  546.222330][T26205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  546.510866][T26221] netlink: 'syz.4.5836': attribute type 2 has an invalid length.
[  546.664445][T26230] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  547.655516][   T51] Bluetooth: hci3: link tx timeout
[  547.683630][   T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  548.208882][T26332] bond13 (unregistering): Released all slaves
[  548.595540][T26356] nbd: couldn't find a device at index 4
[  548.724637][T26366] __nla_validate_parse: 9 callbacks suppressed
[  548.724658][T26366] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5871'.
[  548.753381][T26366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.796571][T26374] netlink: 'syz.4.5875': attribute type 4 has an invalid length.
[  548.815441][T26369] netlink: 'syz.3.5873': attribute type 1 has an invalid length.
[  548.825159][T26370] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5873'.
[  548.835683][T26375] sctp: [Deprecated]: syz.1.5874 (pid 26375) Use of int in maxseg socket option.
[  548.835683][T26375] Use struct sctp_assoc_value instead
[  548.934913][T26385] netlink: 'syz.4.5875': attribute type 4 has an invalid length.
[  548.957190][T26369] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  549.026189][T26390] nbd: must specify a size in bytes for the device
[  549.076032][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5878'.
[  549.087555][T26397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5879'.
[  549.094694][T26390] IPv6: NLM_F_CREATE should be specified when creating new route
[  549.105260][T26390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  549.112619][T26390] IPv6: NLM_F_CREATE should be set when creating new route
[  549.119941][T26390] IPv6: NLM_F_CREATE should be set when creating new route
[  549.202546][T26401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5882'.
[  549.282145][T26407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5883'.
[  549.345021][T26413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5885'.
[  549.750842][ T5859] Bluetooth: hci3: command 0x0405 tx timeout
[  550.077613][T26461] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5897'.
[  550.136328][T26464] netlink: 'syz.3.5898': attribute type 1 has an invalid length.
[  550.146350][T26464] netlink: 212 bytes leftover after parsing attributes in process `syz.3.5898'.
[  550.156980][T26464] netlink: 'syz.3.5898': attribute type 1 has an invalid length.
[  550.169688][T26464] netlink: 'syz.3.5898': attribute type 1 has an invalid length.
[  550.205415][T26464] bond10 (unregistering): Released all slaves
[  550.235540][T26467] ip6tnl4: entered promiscuous mode
[  550.242739][T26467] ip6tnl4: entered allmulticast mode
[  550.262055][T26465] netlink: 'syz.0.5895': attribute type 17 has an invalid length.
[  550.281634][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5895'.
[  550.321426][T26469] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  550.374448][T26471] netlink: 'syz.3.5900': attribute type 1 has an invalid length.
[  550.464108][T26474] bond10: (slave bridge0): making interface the new active one
[  550.503161][T26474] bond10: (slave bridge0): Enslaving as an active interface with an up link
[  550.966889][T26512] sit1: entered allmulticast mode
[  551.056620][T26516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  551.076725][T26517] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode
[  551.084341][T26517] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[  551.648434][T26544] rdma_rxe: rxe_newlink: failed to add bond0
[  551.741024][T26544] netlink: 'syz.1.5920': attribute type 13 has an invalid length.
[  551.994933][T26551] netlink: 'syz.0.5923': attribute type 8 has an invalid length.
[  552.626569][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  552.646160][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  552.655721][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  552.671507][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  552.680117][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  552.691991][T26564] hsr_slave_0 (unregistering): left promiscuous mode
[  552.817473][T26577] lo speed is unknown, defaulting to 1000
[  553.578201][T26577] wg1 speed is unknown, defaulting to 1000
[  553.628174][T26577] hsr0 speed is unknown, defaulting to 1000
[  554.044002][T26577] chnl_net:caif_netlink_parms(): no params data found
[  554.319052][T26577] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.338162][T26577] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.358410][T26577] bridge_slave_0: entered allmulticast mode
[  554.377585][T26577] bridge_slave_0: entered promiscuous mode
[  554.398442][T26577] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.417764][T26577] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.435947][T26577] bridge_slave_1: entered allmulticast mode
[  554.447458][T26577] bridge_slave_1: entered promiscuous mode
[  554.581250][T26577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.635889][T26577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.671350][T26653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  554.737621][T26577] team0: Port device team_slave_0 added
[  554.748096][T26577] team0: Port device team_slave_1 added
[  554.789812][   T51] Bluetooth: hci4: command tx timeout
[  554.841417][T26577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.858677][T26577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.891462][T26577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.905020][T26577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.912853][T26577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.939184][T26577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  555.041635][T26577] hsr_slave_0: entered promiscuous mode
[  555.048795][T26577] hsr_slave_1: entered promiscuous mode
[  555.068675][T26577] debugfs: 'hsr0' already exists in 'hsr'
[  555.075588][T26577] Cannot create hsr debugfs directory
[  555.189110][T26680] __nla_validate_parse: 4 callbacks suppressed
[  555.189129][T26680] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5952'.
[  555.504085][T26702] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5958'.
[  555.538497][T26702] vlan2: entered allmulticast mode
[  555.544456][T26702] gretap0: entered allmulticast mode
[  555.597664][T26577] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.693144][T26711] openvswitch: netlink: EtherType 53b is less than min 600
[  555.693685][T26577] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.787134][T26577] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.865905][T26721] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5965'.
[  555.893860][T26577] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.963388][T26724] sch_tbf: burst 32 is lower than device ip6tnl0 mtu (1536) !
[  556.267465][T26577] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  556.413199][T26740] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  556.447691][T26742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5972'.
[  556.529350][T26577] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  556.564067][T26577] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  556.588466][T26577] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  556.636837][T26749] netlink: 'syz.0.5974': attribute type 29 has an invalid length.
[  556.716295][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5976'.
[  556.881000][T26577] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.888209][   T51] Bluetooth: hci4: command tx timeout
[  556.922591][T26577] 8021q: adding VLAN 0 to HW filter on device team0
[  556.938073][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.945304][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.972515][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.979728][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.074256][T26776] netlink: 'syz.2.5981': attribute type 11 has an invalid length.
[  557.093309][T26776] netlink: 'syz.2.5981': attribute type 11 has an invalid length.
[  557.110763][T26776] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5981'.
[  557.274283][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5984'.
[  557.324691][T26787] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.398061][T26787] bridge_slave_1 (unregistering): left allmulticast mode
[  557.406659][T26787] bridge_slave_1 (unregistering): left promiscuous mode
[  557.414512][T26787] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.450140][T26792] netlink: 'syz.2.5986': attribute type 1 has an invalid length.
[  557.458873][T26792] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5986'.
[  557.477519][T26577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.608138][T26796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5987'.
[  557.628141][T26796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5987'.
[  557.931168][T26809] 8021q: adding VLAN 0 to HW filter on device bond11
[  558.060961][T26577] veth0_vlan: entered promiscuous mode
[  558.085326][T26577] veth1_vlan: entered promiscuous mode
[  558.108767][T26814] lo speed is unknown, defaulting to 1000
[  558.174358][T26577] veth0_macvtap: entered promiscuous mode
[  558.199062][T26577] veth1_macvtap: entered promiscuous mode
[  558.257102][T26577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.300559][T26577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.327206][T18644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.356886][T18644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.382048][T18644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.414361][T18644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.604352][T18674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.620219][T18674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.643736][T26819] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode
[  558.651605][T26819] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode
[  558.665741][T26814] wg1 speed is unknown, defaulting to 1000
[  558.695778][T18663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  558.701208][T26814] hsr0 speed is unknown, defaulting to 1000
[  558.722159][T18663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  558.950456][   T51] Bluetooth: hci4: command tx timeout
[  559.686760][T26875] veth21: entered promiscuous mode
[  559.940597][T26902] netlink: 'syz.3.6013': attribute type 1 has an invalid length.
[  560.062897][T26902] bond11: entered promiscuous mode
[  560.068633][T26902] 8021q: adding VLAN 0 to HW filter on device bond11
[  560.289050][T26925] openvswitch: netlink: Actions may not be safe on all matching packets
[  560.357320][T26927] __nla_validate_parse: 10 callbacks suppressed
[  560.357341][T26927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6020'.
[  560.566529][T26942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6025'.
[  560.627827][T26948] xt_l2tp: invalid flags combination: 8
[  561.030792][   T51] Bluetooth: hci4: command tx timeout
[  562.547683][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6030'.
[  562.568374][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6030'.
[  562.689042][T26974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6031'.
[  562.701267][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6031'.
[  563.395549][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.555238][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.575636][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.606145][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.768524][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.830552][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.858565][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.899036][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.945912][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  563.975011][T27011] netlink: 'syz.0.6043': attribute type 1 has an invalid length.
[  564.079055][T27033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6051'.
[  564.138310][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'.
[  564.541241][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  564.557051][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  564.566514][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  564.598598][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  564.608464][T27048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  564.620411][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  564.633895][T27055] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  564.889231][T27071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6060'.
[  565.283694][T27090] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6064'.
[  565.490320][T27099] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6069'.
[  565.505485][T27099] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  565.732079][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  565.743195][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  565.752451][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  565.764064][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  565.773742][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  565.836915][T27106] lo speed is unknown, defaulting to 1000
[  566.183545][T27106] wg1 speed is unknown, defaulting to 1000
[  566.202401][T27106] hsr0 speed is unknown, defaulting to 1000
[  566.411946][T27126] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  566.662964][T27138] syzkaller0: entered promiscuous mode
[  566.668492][T27138] syzkaller0: entered allmulticast mode
[  566.806776][T27106] chnl_net:caif_netlink_parms(): no params data found
[  567.055102][T27157] syzkaller1: entered promiscuous mode
[  567.061446][T27157] syzkaller1: entered allmulticast mode
[  567.127176][T27175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6090'.
[  567.146911][T27106] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.156943][T27106] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.164390][T27106] bridge_slave_0: entered allmulticast mode
[  567.174059][T27106] bridge_slave_0: entered promiscuous mode
[  567.218050][T27175] 8021q: adding VLAN 0 to HW filter on device bond1
[  567.286144][T27106] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.301644][T27106] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.319154][T27106] bridge_slave_1: entered allmulticast mode
[  567.331508][T27106] bridge_slave_1: entered promiscuous mode
[  567.355126][T27181] veth0: entered promiscuous mode
[  567.364624][T27181] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  567.494562][T27106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.511023][T27198] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6094'.
[  567.527163][T27106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.537901][T27197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  567.547559][T27198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6094'.
[  567.600548][T27202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6098'.
[  567.641473][T27106] team0: Port device team_slave_0 added
[  567.663064][T27106] team0: Port device team_slave_1 added
[  567.736888][T27212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6101'.
[  567.766339][T27106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.777065][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6101'.
[  567.786945][T27106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.836543][   T51] Bluetooth: hci1: command tx timeout
[  567.856217][T27106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.872123][T27106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.880446][T27106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  567.907612][T27106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.924968][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'.
[  568.046049][T27226] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  568.058501][T27226] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  568.127034][T27221] bond0: (slave bridge6): Enslaving as an active interface with a down link
[  568.131786][T27231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6105'.
[  568.154733][T27106] hsr_slave_0: entered promiscuous mode
[  568.166260][T27106] hsr_slave_1: entered promiscuous mode
[  568.176169][T27106] debugfs: 'hsr0' already exists in 'hsr'
[  568.183230][T27106] Cannot create hsr debugfs directory
[  568.267202][T27226] macvlan0: entered promiscuous mode
[  568.295566][T27226] macvlan0: entered allmulticast mode
[  568.321680][T27226] bond0: entered promiscuous mode
[  568.332007][T27226] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  568.364853][T27226] bond0: left promiscuous mode
[  568.447959][T27221] bond0: (slave gretap3): making interface the new active one
[  568.465216][T27221] bond0: (slave gretap3): Enslaving as an active interface with an up link
[  568.502269][T27221] syz.2.6105 (27221) used greatest stack depth: 17416 bytes left
[  568.597731][T27253] validate_nla: 29 callbacks suppressed
[  568.597750][T27253] netlink: 'syz.2.6112': attribute type 10 has an invalid length.
[  568.811990][T27106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  568.908159][T27106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  569.001066][T27106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  569.060704][T27265] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode
[  569.067990][T27265] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode
[  569.104308][T27266] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6113'.
[  569.244869][T27106] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  569.264468][T27106] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  569.281249][T27106] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  569.294023][T27106] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  569.417587][T27106] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.452374][T27106] 8021q: adding VLAN 0 to HW filter on device team0
[  569.468253][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.475490][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[  569.503967][T18671] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.511301][T18671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  569.910573][   T51] Bluetooth: hci1: command tx timeout
[  569.954111][T27106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  570.110808][T27106] veth0_vlan: entered promiscuous mode
[  570.203198][T27106] veth1_vlan: entered promiscuous mode
[  570.217228][T27314] netlink: 'syz.3.6127': attribute type 1 has an invalid length.
[  570.396538][T27324] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  570.404892][T27324] netlink: 'syz.3.6130': attribute type 2 has an invalid length.
[  570.432675][T27324] netlink: 'syz.3.6130': attribute type 1 has an invalid length.
[  570.502444][T27106] veth0_macvtap: entered promiscuous mode
[  570.528149][T27106] veth1_macvtap: entered promiscuous mode
[  570.555764][T27335] IPv6: NLM_F_CREATE should be specified when creating new route
[  570.623840][T27106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.678780][T27106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.732399][T18644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.761226][T18663] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.807701][T18663] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.811599][T27347] Bluetooth: MGMT ver 1.23
[  570.823166][T27348] __nla_validate_parse: 7 callbacks suppressed
[  570.823181][T27348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6137'.
[  570.827606][T18663] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.830684][T27347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6137'.
[  571.057832][T27358] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  571.140192][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.170024][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.238691][T18644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.247656][T18644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.309151][T27367] netlink: 'syz.3.6142': attribute type 1 has an invalid length.
[  571.339070][T27367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6142'.
[  571.678057][T27390] netlink: 'syz.0.6153': attribute type 1 has an invalid length.
[  571.698397][T27390] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6153'.
[  571.772612][T27393] netlink: 'syz.4.6152': attribute type 21 has an invalid length.
[  571.793129][   T30] audit: type=1107 audit(1759742471.295:13): pid=27386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�����('
[  571.992712][   T51] Bluetooth: hci1: command tx timeout
[  572.279229][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  572.309409][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  572.327256][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  572.343824][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  572.440572][T27417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'.
[  572.529186][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  572.563829][T27420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6158'.
[  572.836907][T27412] lo speed is unknown, defaulting to 1000
[  572.900628][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'.
[  572.920209][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'.
[  572.949020][T22728] ------------[ cut here ]------------
[  572.955195][T22728] refcount_t: underflow; use-after-free.
[  572.961641][T22728] WARNING: CPU: 0 PID: 22728 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  572.971470][T22728] Modules linked in:
[  572.975667][T22728] CPU: 0 UID: 0 PID: 22728 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  572.985535][T22728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  572.996519][T22728] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  573.003311][T22728] Code: a0 15 9e 8b e8 37 47 fd fc 90 0f 0b 90 90 eb d7 e8 1b d9 39 fd c6 05 8c f1 c0 0a 01 90 48 c7 c7 00 16 9e 8b e8 17 47 fd fc 90 <0f> 0b 90 90 eb b7 e8 fb d8 39 fd c6 05 69 f1 c0 0a 01 90 48 c7 c7
[  573.024729][T22728] RSP: 0018:ffffc90010f5f700 EFLAGS: 00010246
[  573.031510][T22728] RAX: 329c7f23084e1600 RBX: 0000000000000003 RCX: ffff88805d8fbc80
[  573.039804][T22728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  573.047767][T22728] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  573.056186][T22728] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000
[  573.064438][T22728] R13: ffff888042805c60 R14: ffff888042805c78 R15: ffffffff85be6d60
[  573.072752][T22728] FS:  0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000
[  573.082128][T22728] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  573.088701][T22728] CR2: 00007f7165768f98 CR3: 0000000032386000 CR4: 00000000003526f0
[  573.097478][T22728] Call Trace:
[  573.101291][T22728]  <TASK>
[  573.104211][T22728]  klist_dec_and_del+0x3c7/0x3d0
[  573.109135][T22728]  ? __pfx_klist_children_put+0x10/0x10
[  573.115752][T22728]  klist_del+0xa6/0x110
[  573.120209][T22728]  device_del+0x280/0x8e0
[  573.124525][T22728]  ? _raw_spin_unlock_irq+0x2e/0x50
[  573.130136][T22728]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  573.136194][T22728]  ? __pfx_device_del+0x10/0x10
[  573.141484][T22728]  ? netdev_unregister_kobject+0x344/0x450
[  573.147309][T22728]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  573.154047][T22728]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  573.161098][T22728]  ? rtnl_net_dev_lock+0x257/0x2f0
[  573.166197][T22728]  unregister_netdevice_queue+0x33c/0x380
[  573.172431][T22728]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  573.178669][T22728]  ? rtnl_net_dev_lock+0x36/0x2f0
[  573.184018][T22728]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  573.189128][T22728]  unregister_netdev+0x1f/0x60
[  573.196411][T22728]  bnep_session+0x294d/0x2b40
[  573.202747][T22728]  ? rcu_is_watching+0x15/0xb0
[  573.207516][T22728]  ? trace_sched_exit_tp+0x36/0x110
[  573.213075][T22728]  ? __lock_acquire+0xab9/0xd20
[  573.217926][T22728]  ? __pfx_bnep_session+0x10/0x10
[  573.223257][T22728]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  573.229135][T22728]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  573.235712][T22728]  ? __pfx_woken_wake_function+0x10/0x10
[  573.241478][T22728]  ? __kthread_parkme+0x7b/0x200
[  573.246411][T22728]  ? __kthread_parkme+0x1a1/0x200
[  573.251507][T22728]  kthread+0x711/0x8a0
[  573.255570][T22728]  ? __pfx_bnep_session+0x10/0x10
[  573.261013][T22728]  ? __pfx_kthread+0x10/0x10
[  573.265594][T22728]  ? _raw_spin_unlock_irq+0x23/0x50
[  573.271126][T22728]  ? lockdep_hardirqs_on+0x9c/0x150
[  573.276348][T22728]  ? __pfx_kthread+0x10/0x10
[  573.281215][T22728]  ret_from_fork+0x436/0x7d0
[  573.285789][T22728]  ? __pfx_ret_from_fork+0x10/0x10
[  573.291317][T22728]  ? __switch_to_asm+0x39/0x70
[  573.296564][T22728]  ? __switch_to_asm+0x33/0x70
[  573.301881][T22728]  ? __pfx_kthread+0x10/0x10
[  573.306461][T22728]  ret_from_fork_asm+0x1a/0x30
[  573.311533][T22728]  </TASK>
[  573.314544][T22728] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  573.321889][T22728] CPU: 0 UID: 0 PID: 22728 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  573.331404][T22728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  573.341438][T22728] Call Trace:
[  573.344703][T22728]  <TASK>
[  573.347637][T22728]  dump_stack_lvl+0x99/0x250
[  573.352208][T22728]  ? __asan_memcpy+0x40/0x70
[  573.356776][T22728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  573.361970][T22728]  ? __pfx__printk+0x10/0x10
[  573.366563][T22728]  vpanic+0x281/0x750
[  573.370550][T22728]  ? __pfx__printk+0x10/0x10
[  573.375124][T22728]  ? __pfx_vpanic+0x10/0x10
[  573.379604][T22728]  ? is_bpf_text_address+0x26/0x2b0
[  573.384811][T22728]  panic+0xb9/0xc0
[  573.388602][T22728]  ? __pfx_panic+0x10/0x10
[  573.393039][T22728]  __warn+0x31b/0x4b0
[  573.397001][T22728]  ? refcount_warn_saturate+0x11a/0x1d0
[  573.402522][T22728]  ? refcount_warn_saturate+0x11a/0x1d0
[  573.408062][T22728]  report_bug+0x2be/0x4f0
[  573.412371][T22728]  ? refcount_warn_saturate+0x11a/0x1d0
[  573.417897][T22728]  ? refcount_warn_saturate+0x11a/0x1d0
[  573.423431][T22728]  ? refcount_warn_saturate+0x11c/0x1d0
[  573.428951][T22728]  handle_bug+0x84/0x160
[  573.433173][T22728]  exc_invalid_op+0x1a/0x50
[  573.437654][T22728]  asm_exc_invalid_op+0x1a/0x20
[  573.442493][T22728] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  573.448734][T22728] Code: a0 15 9e 8b e8 37 47 fd fc 90 0f 0b 90 90 eb d7 e8 1b d9 39 fd c6 05 8c f1 c0 0a 01 90 48 c7 c7 00 16 9e 8b e8 17 47 fd fc 90 <0f> 0b 90 90 eb b7 e8 fb d8 39 fd c6 05 69 f1 c0 0a 01 90 48 c7 c7
[  573.468345][T22728] RSP: 0018:ffffc90010f5f700 EFLAGS: 00010246
[  573.474409][T22728] RAX: 329c7f23084e1600 RBX: 0000000000000003 RCX: ffff88805d8fbc80
[  573.482376][T22728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  573.490345][T22728] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  573.498318][T22728] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000
[  573.506358][T22728] R13: ffff888042805c60 R14: ffff888042805c78 R15: ffffffff85be6d60
[  573.514398][T22728]  ? __pfx_klist_children_put+0x10/0x10
[  573.519944][T22728]  klist_dec_and_del+0x3c7/0x3d0
[  573.524868][T22728]  ? __pfx_klist_children_put+0x10/0x10
[  573.530419][T22728]  klist_del+0xa6/0x110
[  573.534643][T22728]  device_del+0x280/0x8e0
[  573.538983][T22728]  ? _raw_spin_unlock_irq+0x2e/0x50
[  573.544174][T22728]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  573.550226][T22728]  ? __pfx_device_del+0x10/0x10
[  573.555056][T22728]  ? netdev_unregister_kobject+0x344/0x450
[  573.560849][T22728]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  573.567258][T22728]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  573.574006][T22728]  ? rtnl_net_dev_lock+0x257/0x2f0
[  573.579103][T22728]  unregister_netdevice_queue+0x33c/0x380
[  573.584918][T22728]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  573.591406][T22728]  ? rtnl_net_dev_lock+0x36/0x2f0
[  573.596413][T22728]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  573.601518][T22728]  unregister_netdev+0x1f/0x60
[  573.606297][T22728]  bnep_session+0x294d/0x2b40
[  573.610972][T22728]  ? rcu_is_watching+0x15/0xb0
[  573.615722][T22728]  ? trace_sched_exit_tp+0x36/0x110
[  573.620916][T22728]  ? __lock_acquire+0xab9/0xd20
[  573.625758][T22728]  ? __pfx_bnep_session+0x10/0x10
[  573.630764][T22728]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  573.636641][T22728]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  573.642952][T22728]  ? __pfx_woken_wake_function+0x10/0x10
[  573.648599][T22728]  ? __kthread_parkme+0x7b/0x200
[  573.653524][T22728]  ? __kthread_parkme+0x1a1/0x200
[  573.658549][T22728]  kthread+0x711/0x8a0
[  573.662785][T22728]  ? __pfx_bnep_session+0x10/0x10
[  573.667811][T22728]  ? __pfx_kthread+0x10/0x10
[  573.672408][T22728]  ? _raw_spin_unlock_irq+0x23/0x50
[  573.677603][T22728]  ? lockdep_hardirqs_on+0x9c/0x150
[  573.682805][T22728]  ? __pfx_kthread+0x10/0x10
[  573.687393][T22728]  ret_from_fork+0x436/0x7d0
[  573.691986][T22728]  ? __pfx_ret_from_fork+0x10/0x10
[  573.697125][T22728]  ? __switch_to_asm+0x39/0x70
[  573.701900][T22728]  ? __switch_to_asm+0x33/0x70
[  573.706658][T22728]  ? __pfx_kthread+0x10/0x10
[  573.711253][T22728]  ret_from_fork_asm+0x1a/0x30
[  573.716029][T22728]  </TASK>
[  574.830119][T22728] Shutting down cpus with NMI
[  574.835130][T22728] Kernel Offset: disabled
[  574.839447][T22728] Rebooting in 86400 seconds..